lmz/thefair-skeleton
The source includes tests and a usable README, and the package declares a clear license with only three runtime dependencies. It has had no release or commit activity since December 2021, with no security policy and install-time lifecycle scripts adding maintenance and supply-chain concerns.
40%
Total Score
0
100
80
50
Health Score Breakdown
The latest release was in December 2021, with no releases in the last 12 months; this indicates a long period without published maintenance for a package intended to be depended on.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating likely abandonment risk.
The package uses four install or update lifecycle scripts, which increases installation complexity and warrants more trust in the publisher and release process, especially alongside stale maintenance.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response for a package with no recent maintenance evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 thefair/thefairlib Version ~4.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.