lishi share config
45%
Total Score
unhealthy
Risky: a single 2021 release and years without recent repository activity suggest abandonment.
One registry maintainer is responsible for publishing the package, which limits publishing continuity and bus-factor resilience. The matching repository owner provides some continuity but does not show a broader maintainer base.
The package has only one release, published about five years ago, with no releases in the last 12 months. This is substantial evidence of stagnation, although a small configuration package may change infrequently.
The repository recorded no commits or active maintainers in the last three months, consistent with the package's long release gap. The repository is not archived, but current maintenance activity is not demonstrated.
The repository name matches the package, which supports the linkage, but its README does not mention the package. This is a minor transparency concern rather than evidence that the repository is unrelated.
The repository has zero stars and forks and only two watchers, so there is little community evidence or external visibility to compensate for the limited maintenance history.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.