rmx351/approval_flow
The package is small and easy to inspect, with tests, a README, and only two runtime dependencies. Its stable release and lack of deprecation offer little compensation for the long-term inactivity and limited transparency.
42%
Total Score
50
100
81
83
Health Score Breakdown
The manifest declares a proprietary license, but no license file was detected in the package or repository. This creates a material transparency and reuse concern for an open-source dependency.
Only one registry account has publish access. Because the repository is user-owned, this is not inherently abnormal, but it provides limited visible publishing redundancy alongside the inactive project.
This is the only release, published over five years ago, with no releases in the last 12 months. That is substantial evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged lack of releases.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of community adoption or oversight.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mengxu Ran |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 topthink/framework Version v5.0.24 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.