Package Health

ircmaxell/random-lib

The package has useful documentation, tests, a clear license, and few runtime dependencies. Its inactive project signals leave little evidence of ongoing maintenance or security response, so pinning this old release carries substantial long-term risk.

Latest v1.2.0PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was v1.2.0 on September 7, 2016, with no releases in the last 12 months. That long release gap is strong evidence of abandonment risk for a dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, corroborating the absence of recent package releases and indicating no visible ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 19 issues and 4 pull requests remain open. This suggests limited current project attention.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This matters for a library explicitly intended for security-related randomness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Anthony Ferrara

Direct Dependencies

DependencyLast ReleaseScore
ircmaxell/security-lib
Version ^1.1

Weekly Downloads

Info

Last Published
10 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform