jpi/orm
The package includes tests, release notes, and a clear README. Its workflow leaves both actions unpinned, and the project has no security policy. Recent development is active but concentrated in one contributor, limiting resilience.
70%
Total Score
50
93
67
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the single-contributor and single-maintainer concentration is not offset by visible organizational backing.
One contributor made all recent commits, with a 100% top-contributor share. That leaves maintenance dependent on a single person and increases abandonment risk if they stop contributing.
The repository recorded four commits in the last three months, so development is active. However, the activity is modest and concentrated rather than broadly sustained.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counters provide little external evidence of maturity or review.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jahidul Pabel Islam |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jpi/query Version ^2.2.2 | — | — |
jpi/utils Version ^1.0 | — | — |
jpi/database Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.