File parser module for YAML files - H2S Framework
38%
Total Score
unhealthy
Risky: a proprietary license and no release activity since its only release make long-term dependency use uncertain.
The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This creates a substantial legal and transparency barrier for an open-source dependency.
Only one registry account has publish access. The linked repository is owned by a user account rather than an identified organization, so there is limited demonstrated publishing redundancy.
The package has no README, while tests and a changelog are not expected in published artifacts and are therefore not gaps by themselves. Missing consumer documentation is still a minor concern for a library.
This package has made only one release, on May 2, 2025, with no releases in the following 12 months. The lack of follow-up releases is a meaningful maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the one-release history, this suggests limited ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.2 | — | — |
h2sf/serialization Version ^0.3 | — | — |
h2sf/file-abstraction Version ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.