jelix/properties-file
The source is clearly linked, licensed, documented, and backed by an organization. Its license texts disagree, and recent maintenance evidence is thin despite the repository not being archived.
64%
Total Score
75
100
81
83
Health Score Breakdown
The artifact contains a license file and the repository also has one, but the declared LGPL-2.1 differs from the detected MIT license, creating a material licensing ambiguity.
The package has six releases since October 2018, but its latest registry release was in June 2022 and there were no releases in the last 12 months, indicating stale publishing activity.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of active maintenance for a package whose latest registry release is already several years old.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest security-process gap.
The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Laurent Jouanneau |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.