hella-engine/schedule
The four-file artifact offers little documentation, and the repository has no security scanning or policy. Its MIT declaration, simple dependency set, and package-name reference in the README provide some transparency, but they do not offset the age and inactivity.
38%
Total Score
0
100
69
83
Health Score Breakdown
The package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the stable 1.0.0 version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release silence. No provided maintenance signal compensates for this inactivity.
The package includes a README, but it is only 39 characters and provides almost no integration guidance. Missing tests and a changelog are normal for published artifacts and are not counted against it.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no additional confidence in ongoing maintenance.
Composer is used as the build tool, but no security-scanning tooling is present. This is a transparency and maintenance-hygiene gap, though it is not evidence of malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 peng.zhi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mtdowling/cron-expression Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.