lokesh/sodium
It includes tests, a changelog, and a matching MIT license. The small user-run project has little adoption evidence and no security policy, increasing maintenance and transparency concerns.
43%
Total Score
33
72
75
Health Score Breakdown
This is the package's only release, published over 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since its last release.
The registry lists one maintainer, a thin publishing base for a package with no recent release or commit activity. The linked repository is user-owned, so there is no organizational backing to offset that limitation.
There has been no issue or pull-request activity in the last month, while one issue and one pull request remain open. This adds evidence of inactive maintenance.
The repository has only 11 stars, 3 forks, and no watchers. Low adoption is supporting evidence of limited maturity, though popularity alone does not determine package health.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lokesh |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 imagine/imagine Version dev-master | — | — |
sybio/gif-creator Version 1.0.0 | — | — |
sybio/gif-frame-extractor Version 1.0.0 | — | — |
skyzyx/adobe-swatch-exchange Version 2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.