localheinz/token
The package has clear documentation, an MIT license, and a matching source repository. Its maintenance has stopped, the repository is archived, and the package is marked abandoned, so pinning it creates substantial long-term risk.
12%
Total Score
0
43
75
Health Score Breakdown
The package is reported to borrow the identity of the much more downloaded localheinz/diff package, while not describing itself as a fork. Consumers may have intended the lookalike package instead.
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the release.
The package has had no release in nearly nine years, despite only four releases overall. This strongly indicates abandonment rather than an actively maintained stable project.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its archived state and reinforcing the maintenance risk.
The linked repository is archived, and its last push was on November 18, 2019. Archived source indicates the project is no longer maintained.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andreas Möller |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.