qadk/helloworld
Its tiny two-file footprint keeps adoption simple, while the stable version and non-archived repository offer limited reassurance. Only one maintainer and no security process leave little evidence of ongoing support.
38%
Total Score
25
63
88
Health Score Breakdown
The package has had only one release, on February 29, 2016, with no releases in the last 12 months. This long period without updates is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the package having been dormant since 2016.
There is no declared license, license file, or repository license file. That creates a material transparency and reuse concern for a dependency.
One registry maintainer is consistent with a small user-owned project, but it leaves a thin publishing base and limited apparent continuity.
The package has no README, making its usage harder to verify for consumers. The absence of tests and a changelog in the artifact is normal packaging practice and is not itself a concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 yuhui |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.