comradefuzz/catena
The package has a clear README, a declared GPL-3.0+ license, and no install-time scripts. Its small dependency set and matching repository make the code easy to inspect, but the lack of a security policy limits transparency.
30%
Total Score
0
100
70
83
Health Score Breakdown
This package has only one release, published in June 2017, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency receiving ongoing production use.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in June 2017. The repository shows no recent maintenance capacity.
The artifact includes a substantial README and this version has a GitHub release, which help consumers understand the package. The README also explicitly says the module is in development and should not be used in production, a material maturity warning.
The linked repository has no security policy. This does not prove a security problem, but it leaves disclosure and maintenance expectations unclear for a package used in background job infrastructure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fuzz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version * | — | — |
yiisoft/yii2-redis Version * | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.