acidjazz/larpug
It includes tests, a readable guide, and a repository that clearly matches the package. The license declaration conflicts with the detected license, and the project has limited security tooling.
38%
Total Score
25
71
50
Health Score Breakdown
The package has only 3 releases, with none in the last 12 months; its latest release was in February 2017. This long period without registry updates is a strong abandonment concern.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's prolonged release inactivity.
The artifact contains a license file, but it is detected as Apache-2.0 while the manifest declares MIT. The mismatch creates avoidable licensing uncertainty.
There were no new or closed issues or pull requests in the last month, while 2 issues and 1 pull request remain open. This supports the broader maintenance concern.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kevin Olson |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.