huangdijia/constants
It has a clear MIT license, a focused dependency set, tests, and useful documentation. Workflow pinning is weak, one referenced action is archived, and the repository has no security scanning or published security policy.
55%
Total Score
50
100
86
83
Health Score Breakdown
One registry maintainer is a thin publishing base, although the linked repository is owned by the same individual, so this is a modest resilience concern rather than a severe risk.
The latest release was in August 2023, with no releases in the following 12 months of the collection window. For a package first released in 2020, this indicates meaningfully slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release and raising abandonment risk.
Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and maintenance-hygiene gap.
The repository has no published security policy, leaving vulnerability reporting expectations unclear for consumers.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Huangdijia |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.