Elsa bundle
30%
Total Score
unhealthy
Risky: no license, no recent releases, and sensitive-looking key files are included in the package.
The package contains sensitive-looking files including config/secrets/private.pem, config/secrets/passphrase, and config/secrets/encryption.key. Shipping these files creates a serious packaging and operational risk.
No declared license, recognised license text, or license file was found in the release. That leaves reuse and redistribution terms unclear for a dependency.
The artifact includes tests and a README, which are positive, but the README is only 19 characters and provides virtually no consumer guidance.
Only three releases have been published, with no releases in the last 12 months; the latest release is over a year old. This provides weak evidence of continuing maintenance.
We didn't find any vulnerabilities for this package.
| Version | Published | Vulnerabilities |
|---|---|---|
| v2025.06.23 | 23 Jun 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v2025.05.31 | 31 May 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 6.4 | 23 Jun 2025 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
No direct dependencies.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.