在 ide 中可识别 yar 系列函数和方法
42%
Total Score
25
67
100
The package has only one release, published about 8 years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency, although a small stable utility may not need frequent releases.
The repository recorded no commits and no active maintainers during the last 3 months, consistent with the package's last push in August 2018. This leaves little evidence that defects or compatibility changes will be addressed.
Neither the package metadata nor the artifact or repository contains a license. That creates a real adoption and redistribution risk even though the source is publicly available.
The registry namespace and repository owner match, providing consistent ownership evidence. The owner is an individual rather than an organization, so there is no broader backing shown to compensate for the lack of recent activity.
The repository is not formally archived, but its last push was in August 2018 and commit activity is currently absent. The non-archived status therefore provides little compensation for the observed staleness.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.