luccpl/orkestra-skeleton
The release includes tests and release notes, but consumer documentation is absent and install-time code runs during project creation. Its small, user-owned project has had no commits in about 6 months and no release in about 17 months, while licensing and security guidance are missing.
46%
Total Score
0
63
50
Health Score Breakdown
No license declaration or license file was detected in the package or repository, leaving redistribution and usage rights unclear for adopters.
The package has five releases over about 2 years, but none in the last 12 months; the latest release was about 17 months ago, indicating a significant maintenance pause.
The repository recorded zero commits and zero active maintainers in the last 3 months, providing no evidence of current maintenance capacity.
The package runs a post-create-project-cmd script, which is expected for a project skeleton but increases installation behavior that adopters should account for.
The artifact includes tests and this version has GitHub release notes, which provide useful project and release documentation. The missing README is still a real usability gap for a project scaffold consumers must understand.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 luccpl/orkestra Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.