chonla/cfg
A clear MIT license, README, tests, and no install scripts support basic transparency. The repository has no security policy, and its zero-star, zero-fork profile offers little evidence of ongoing support.
40%
Total Score
0
60
75
Health Score Breakdown
The package has had only 3 releases, with none in the last 12 months; its latest release was over 11 years ago. This is strong evidence of abandonment, though the registry does not mark it deprecated.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. No current maintenance capacity is visible.
The linked repository is named Config rather than chonla/cfg and does not mention the package in its README. That weakens confidence that the repository clearly documents this package, despite the ordinary possibility of a sub-package relationship.
The repository has 0 stars, 0 forks, and 1 watcher, so there is little community evidence to compensate for the lack of recent maintenance. Popularity is supporting evidence rather than a verdict by itself.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package's small scope and otherwise visible source provide some context.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Chonlasith Jucksriporn |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 noodlehaus/config Version 0.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.