infrajs/layer-reload
The repository has no security scanning or policy, and its three-file artifact offers little evidence of broader project maturity. The stable version and matching organization repository provide traceability, but not enough to offset the age.
31%
Total Score
50
67
75
Health Score Breakdown
The package includes a README and a GitHub release, but the README explicitly says the module is incomplete and not ready for use. Missing tests and a changelog are normal packaging practice and do not add concern.
This package has had only one release, on March 2, 2016, with no releases in roughly 10 years. That is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this materially increases abandonment risk.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful adoption signal to offset the inactivity.
Composer is used for the build, which supports reproducibility, but no security-scanning tools are present. That is a maintenance and transparency gap, though not a severe risk by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.