hedeqiang/umeng
友盟推送
43%
Total Score
unhealthy
Risky: no release or commit activity since September 2022, indicating a likely abandoned dependency.
Health Score Breakdown
The latest release was in September 2022, with no releases in the following four years despite 19 releases overall. The earlier roughly 30-day median interval shows this is a prolonged stop rather than normal spacing.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance after the last release.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This adds a modest concern but does not outweigh the stronger maintenance evidence.
Both workflows were analyzed completely with no untrusted checkouts or script injection, but all four action references are unpinned and one references an archived action. These are meaningful supply-chain hygiene weaknesses without an untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 hedeqiang |
| housemecn |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.3|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.