dependabot/dummy-pkg-b
The MIT license, README, and organization ownership provide basic transparency. Maintenance stopped in 2017, with no recent releases, commits, or issue work. This is a weak choice for software that needs ongoing updates.
58%
Total Score
67
88
100
Health Score Breakdown
The package has had only three releases, all by June 2017, and none in the last 12 months. This long period without releases is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped around 2017. This raises abandonment risk.
There were no new or closed issues or pull requests in the last month, and no open work remains. For a long-inactive dummy package this is consistent with a finished fixture, but it provides no evidence of ongoing support.
Composer is used as the build tool, providing basic project structure, but no security scanning tools were detected. For this small dummy package that is a minor hygiene gap rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 dependabot/dummy-pkg-a Version ~2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.