locomotivemtl/charcoal-city-boilerplate
The repository has clear documentation, tests, a changelog, organizational ownership, and a security policy. The release is about nine years old with no recent commits, and its license metadata conflicts with a bundled Apache-2.0 file.
42%
Total Score
75
80
100
Health Score Breakdown
The manifest declares MIT and the artifact contains a license file, but that file is recognized as Apache-2.0 and does not match the declaration. The package is licensed, yet the mismatch reduces transparency.
The latest release was published on April 3, 2017, and there have been no releases in roughly nine years. This is strong evidence of abandonment risk for a project template.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No newer activity is provided to offset that concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mustache/mustache Version ^2.10 | — | — |
mcaskill/slim-polyglot Version dev-master | — | — |
beneroch/charcoal-utils Version dev-master | — | — |
mcaskill/charcoal-support Version dev-master | — | — |
locomotivemtl/charcoal-app Version ^0.4.5 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.