quonain/smart-response
Usable with caveats: it is a well-documented, tested, licensed, and actively released young package, but the repository shows no commits or active maintainers in the last three months. Review its recent releases carefully before making it a core dependency.
72%
Total Score
67
100
94
90
Malware detected in 1 version
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the single registry maintainer represents a genuinely thin project backing rather than normal organization publishing hygiene.
The package is young at 118 days and has six releases, all within the last 12 months; the very short median interval indicates concentrated release activity rather than a long maintenance record.
The repository records zero commits and zero active maintainers during the last three months, a meaningful maintenance concern for a young package. Recent releases and merged pull requests partly offset this, but do not establish sustained activity.
The release workflow has top-level write permissions, and two workflows omit top-level permission declarations. This is broader or less explicit than least-privilege configuration and warrants review, although no dangerous workflow pattern was detected.
Package versions
Maintainers
 Quonain Ejaz |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.