ankane/seaduck
Clear documentation, tests, and an MIT license make integration straightforward. The workflow uses unpinned actions, and there is no security policy; install-time scripts also add operational exposure.
68%
Total Score
50
100
81
50
Health Score Breakdown
post-install-cmd and post-update-cmd scripts run during Composer operations to check the shared library, adding install-time behavior that consumers should account for.
The registry namespace and repository are owned by the same individual account, confirming ownership alignment but not organizational maintenance redundancy.
The package has only two releases across about 10 months, with releases roughly five months apart. The latest release is recent, so this indicates a young project rather than clear abandonment.
One contributor made all two recent commits, leaving maintenance concentrated in a single person without demonstrated redundancy.
There were two commits in the last three months, showing recent maintenance but a modest activity level for a young package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrew Kane |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 satur.io/duckdb Version ^2.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.