nahid/qarray
A tested repository, release notes, and a stable major version provide useful maturity signals. The long pause since the last release and absent recent commits leave maintenance uncertain, while workflow references are not pinned. Pin this version if you adopt it.
62%
Total Score
50
86
50
Health Score Breakdown
The artifact includes a license file and the repository also has one, so licensing is present. However, the manifest declares MIT while the detected file is CC0-1.0, creating a material licensing ambiguity.
The package has 10 releases over nearly eight years, but none in the last 12 months; the latest release was about 21 months ago. This suggests a mature but currently inactive release cadence.
The repository recorded no commits and no active maintainers in the last three months, consistent with the roughly 21-month gap since the last push. This leaves little evidence of ongoing maintenance.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself indicate that the package is unsafe.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or high-severity issues. All 3 of 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nahid Bin Azhar |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 myclabs/deep-copy Version ^1.8 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.