onetech/cegid-y2-sdk
The single maintainer and absent security policy reduce resilience for long-term support. Clear documentation, an MIT license, and a repository that matches the package make adoption more transparent.
67%
Total Score
50
100
88
50
Health Score Breakdown
Only one registry publishing maintainer is listed, which creates a thin publishing base and increases continuity risk if that person stops maintaining the package.
The package has 8 releases, but none in the last 12 months; its latest release was over a year ago. The earlier releases were closely spaced, so current maintenance appears to have slowed materially.
Composer is used for builds, but no security-scanning tooling is reported. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Peter Guo |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.