junaid2113/jello
The package has a clear license, a useful README, repository tests, and no install-time scripts. Its only release was nearly two years ago, with no commits in the last three months; workflow actions are also unpinned.
58%
Total Score
50
88
75
Health Score Breakdown
This is the package's only release, published nearly two years ago, with no releases in the last 12 months. That limited history and lack of follow-up maintenance lower confidence in continued support.
The repository recorded zero commits and zero active maintainers in the last three months. For a package with only one release, this is meaningful evidence of limited ongoing maintenance.
The linked repository has no security policy. This is a transparency gap for reporting and handling issues, though it is not evidence that the package is unsafe.
Both analyzed workflows were complete and had no dangerous triggers, sinks, or audit findings, but both of the two action references were unpinned. That is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Junaid |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^1.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.