dotkernel/dot-user-agent-sniffer
The package has tests, documentation, release notes, and security tooling. Its recent release keeps it relevant, but license inconsistency and limited recent development warrant checking before adoption.
67%
Total Score
75
88
100
Health Score Breakdown
The manifest declares MIT while the artifact license file is detected as GPL-3.0, creating a material licensing ambiguity despite license files in both the artifact and repository.
The package has existed for about 6 years and released once in the last 12 months, with the latest release on October 31, 2025; this shows ongoing but infrequent maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, which limits evidence of continuing maintenance after the latest release.
All four workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, but all 9 action references are unpinned, leaving avoidable build reproducibility and tampering exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dotkernel Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^1.1.2 || ^2.0.0 | — | — |
laminas/laminas-stdlib Version ^3.18.0 | — | — |
matomo/device-detector Version ^6.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.