arc/web
The repository includes tests, documentation, a clear license file, and organizational backing. The license declaration differs from the detected BSD-3-Clause file, and no security policy is provided, so future maintenance and licensing clarity deserve attention.
52%
Total Score
75
80
50
Health Score Breakdown
The artifact contains a license file and the repository also has one, but the manifest declares MIT while the detected file is BSD-3-Clause. The release is licensed, though the mismatch reduces clarity.
The package has nine releases since June 2014, but none in the last four years; this is meaningful evidence of stalled maintenance despite a previously regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a web component library.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2017-20157 arc/web is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 3.0. | 0.0.0 - 3.0 | Critical |
Package versions
Maintainers
 Auke van Slooten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 arc/base Version ~3.0 | — | — |
ralouphie/getallheaders Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.