johnshopkins/vandelay
The concise README and organization-backed repository make the package easy to understand and provide some continuity. Its small codebase and two runtime dependencies keep adoption simple, but obtain explicit licensing confirmation before use.
62%
Total Score
75
100
79
83
Health Score Breakdown
The package has no declared license, recognized license, or license file in either the artifact or repository, leaving redistribution and use rights unclear.
The package has existed since April 2017 with 16 releases, but only one release appeared in the last 12 months; the latest release was about 11 months ago.
No commits or active maintainers were observed in the last three months. This suggests limited current maintenance, although the repository was pushed with the latest release about 11 months ago.
Composer is used for the build, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ~1.0 | — | — |
ramsey/array_column Version ~1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.