fabiang/dateparser
The package is clearly licensed, includes a README, repository tests, and release notes for this version. Its one-person project has little recent activity, while the workflow needs tighter container pinning.
68%
Total Score
50
100
94
75
Health Score Breakdown
One registry maintainer is a thin publishing base for a user-owned project, increasing dependence on a single person for continuity.
The package has existed since 2017 with 10 releases, but only one release in the last 12 months and a roughly nine-month median interval indicate a slow maintenance pace.
The repository recorded no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but current development activity is limited.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a library intended for direct application use.
All six action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image. The workflow has no untrusted trigger or script-injection finding, which limits the impact to build hygiene rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fabian Grutschus |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phplrt/runtime Version ^3.2 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.