bobosch/ods-osm
The package includes tests, documentation, release notes, and no install-time scripts. Its bundled license files differ from the manifest, and all three workflow actions are unpinned.
68%
Total Score
50
100
81
75
Health Score Breakdown
The manifest declares GPL-2.0-or-later and the artifact contains recognized MIT and BSD-2-Clause license files for bundled components. The package is licensed, but the differing detected licenses warrant checking redistribution terms.
The repository is owned by an individual user rather than an organization, so the small maintainer and contributor base has no visible organizational backing to offset concentration risk.
The package has 16 releases over about 6 years, but none in the last 12 months; this suggests slowed release maintenance, although the repository was pushed recently.
All three recent commits came from one contributor, leaving maintenance dependent on a single active contributor.
Only three commits were made in the last 3 months, indicating limited recent development activity despite the recent repository push.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Robert Heel |
| Alexander Bigga |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^12.4 || ^13.4 | — | — |
wgirhad/geophp Version ^3.0 | — | — |
linawolf/list-type-migration Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.