gepardio/connectors-sdk
The licensed artifact includes tests, a changelog, release notes, and a clear README, while organizational ownership is visible. Low popularity, no security policy, and the repository/package naming mismatch add transparency concerns.
43%
Total Score
75
83
50
Health Score Breakdown
The package has only 2 releases, with the latest on September 1, 2022 and none in the last 12 months. This long release gap materially raises abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history's prolonged inactivity.
The linked repository name does not match the package name and its README does not mention the package, so package-to-source ownership is less transparent than expected.
The repository has no security policy. This is a maintenance and disclosure gap, although it does not by itself show that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gepard Development Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
league/config Version ^1.1 | — | — |
beberlei/assert Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.