laxit/keychan
The package includes tests, a README, release notes, and no runtime dependencies. Its repository is not archived and the package is not deprecated, but the license mismatch and lack of recent release or commit activity warrant resolving before adoption.
58%
Total Score
50
100
79
Health Score Breakdown
The manifest declares MIT, while the artifact and repository license file is detected as GPL-3.0. This unresolved mismatch creates a meaningful licensing concern for downstream users.
The package has only three releases since August 2022, with no releases in the last 12 months and a latest release in July 2024. That indicates slow maintenance for a dependency at version 0.0.2.
There were no commits and no active maintainers in the three months measured. Although the repository is not archived, the lack of recent activity raises abandonment risk.
The repository has zero stars and forks and only one watcher. Popularity is not required for a small package, but these counters provide little supporting evidence of community adoption or review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Laxit |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.