cblink/jddj-sdk
The package has a clear README, a small runtime dependency footprint, and repository tests. Its publishing and maintenance trail is too thin for a dependency that may need fixes or updates, so pinning this exact version is prudent.
45%
Total Score
100
100
71
50
Health Score Breakdown
Only one release exists, published more than six years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained package.
The package runs post-install and post-update scripts, adding install-time behavior that consumers must account for. The signal does not show those scripts are harmful, so this is a limited supply-chain hygiene concern.
The repository has 1 star, 0 forks, and 3 watchers. Low adoption is supporting evidence of limited maturity, though popularity alone is not decisive.
The repository is not archived, which preserves a path for future maintenance, but it was last pushed more than six years ago and does not offset the inactive release history.
The repository has no security policy. This weakens transparency and gives consumers no documented process for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 牟勇 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mouyong/foundation-sdk Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.