powerbuoy/sleek-core
The manifest says GPL-2.0-or-later, while the bundled and repository license files identify GPL-3.0. The package is small and clearly matched to its repository, but no security scanning is reported.
58%
Total Score
50
81
100
Health Score Breakdown
A license file is present in both the artifact and repository, but the manifest declares GPL-2.0-or-later while the detected text identifies GPL-3.0; the mismatch should be clarified before adoption.
The package has 16 releases since October 2019, but none in the last 12 months and its latest release was over two years ago, indicating substantial maintenance slowdown.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
Composer is used for the build, but no repository security-scanning tooling is reported; this is a modest transparency and maintenance-hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andreas Lagerkvist |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.