jeckel-lab/contract
The package includes tests, a clear MIT license, static analysis, and a focused dependency set. Maintenance has stopped since March 2024, and its workflow uses seven unpinned actions without a security policy.
58%
Total Score
88
100
89
83
Health Score Breakdown
The package has 16 releases since June 2020 but none in the last 12 months; the latest release was March 25, 2024, indicating a long maintenance gap.
There were zero commits and zero active maintainers in the last three months, consistent with the package's prolonged lack of releases and increasing abandonment risk.
The repository has only two stars, zero forks, and one watcher, offering little external adoption evidence; this is supporting evidence rather than a decisive concern for a small library.
No repository security policy is present, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all seven action references are unpinned. The absence of a top-level permissions block is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Julien Mercier-Rojas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.