ju1ius/css-parser
The source includes tests and Composer build metadata, but its license declaration conflicts with the detected LGPL-3.0 license file. No active maintenance path remains for adopters.
12%
Total Score
50
36
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on it.
The package has only one release, published in June 2014, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.
The linked repository is archived and was last pushed in April 2020, confirming that active maintenance has ended.
A license file is present, so this is not an unlicensed release, but the manifest declares LGPLv2 while the artifact license file was detected as LGPL-3.0. The mismatch needs clarification before adoption.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with the archived, inactive project.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ju1ius |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.