lolfans/finance-sdk
Risky to depend on: the package has had no registry release for nearly seven years and its repository shows no recent development. It is not deprecated or archived and includes a usable README, but the tiny project footprint and missing license make adoption a liability.
38%
Total Score
33
69
50
Health Score Breakdown
The package has only two releases, with the latest published in November 2019 and none in the last 12 months, indicating severe abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year release gap and providing no evidence of active maintenance.
No declared license or license file was found in the package or repository, leaving the legal terms for using this dependency unclear.
Only one registry account has publish access, giving the project a thin publishing base; the individual-owned repository provides no compensating organizational backing.
The registry namespace and repository owner match, but both identify an individual account rather than an organization, so there is no evidence of broader project backing.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 liuda |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.