devgeniem/dustpress-js
The package has a clear README, a changelog, a matching source repository, and no install-time scripts. However, it has had no releases or commits for over three years, with no recent issue activity, and its declared GPL-3.0 license conflicts with the detected MIT license.
52%
Total Score
50
100
80
100
Health Score Breakdown
A license file exists in both the artifact and repository, but the manifest declares GPL-3.0 while the detected license text is MIT. The mismatch creates avoidable uncertainty about the terms of this release.
The package has 44 releases and a regular historical cadence, but its latest release was over three years ago and there were no releases in the last 12 months. The long inactivity lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating that maintenance has stopped rather than merely slowed.
There were no new or closed issues or pull requests in the last month, while five issues and seven pull requests remain open. This suggests unresolved project activity rather than active upkeep.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Miika Arponen |
| Ville Siltala |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ^1||^2 | — | — |
devgeniem/dustpress Version >=1.25.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.