justmd5/pinduoduo-sdk
The source includes tests, a clear README, MIT licensing, and dependency/security tooling. The single maintainer, absent security policy, and fully unpinned workflow reference leave modest maintenance and build-hygiene concerns.
68%
Total Score
50
100
94
75
Health Score Breakdown
Only one registry maintainer is listed, which creates some continuity risk for a user-owned project. The active linked repository and recent push provide partial compensation.
The package has 17 releases but none in the last 12 months, with the latest registry release over two years ago. The repository was pushed in 2025, which partly offsets the stale registry cadence.
No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence of an unsafe release.
The only workflow was fully analyzed with no audit findings or untrusted-code sinks, but its one action reference is unpinned. That creates a modest build reproducibility and supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 丁海军 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hanson/foundation-sdk Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.