markhuot/craft-data
The package is small and documented, with no install-time scripts or registry deprecation. Its lone maintainer and absent security policy leave little evidence of ongoing support.
42%
Total Score
25
100
70
83
Health Score Breakdown
This is the package's only release, published about three years and eleven months ago, with no releases in the last 12 months. That strongly limits evidence of active maintenance.
The repository has had zero commits and zero active maintainers in the last three months, while its last push was in October 2022. This indicates prolonged inactivity.
The manifest declares MIT, but the artifact license file is detected as GPL-3.0. Although a license file exists, the mismatch creates legal uncertainty for adopters.
Only one registry account has publish access. That is a thin publishing base for a package with no recent release or commit activity.
The linked repository has no security policy. This is a transparency gap, though the package's small size and lack of reported workflow activity limit its weight.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mark Huot |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^4.2 | — | — |
markhuot/data Version ^1.0 | — | — |
hashids/hashids Version ^4.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.