lingbaodaozhang/utils

Package file treedanger

The artifact includes cert/pri.key alongside the package code. Shipping a private key is a serious packaging and security-hygiene concern, even though it does not by itself establish malicious behavior.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, despite the release being about nine months old. This is strong evidence of limited ongoing maintenance.

Maintainerscaution

Only one registry maintainer is listed, leaving little visible publishing redundancy. This is more concerning alongside the absent recent commit activity, though it does not prove abandonment.

Release historycaution

All three releases were published within minutes on the same day, with no later releases over about nine months. That suggests a new or quickly abandoned project rather than an established maintenance cadence.

Security policycaution

The linked repository has no security policy. For a utility package handling encryption, certificates, JWTs, and authentication, that leaves security-reporting practices and project response expectations unclear.