shopexpress/delivery-api
It has a usable README and a stable 2.0.4 version, but its install hook adds operational risk. The registry could not verify a source repository, and the license declaration conflicts with the bundled GPL-3.0 file.
44%
Total Score
100
70
75
Health Score Breakdown
The package has 15 releases but none in the last 12 months; the latest release was on February 24, 2021. This long period without releases is a significant abandonment concern.
The manifest declares MIT, but the bundled LICENSE file was detected as GPL-3.0. This unresolved mismatch creates a real adoption and compliance risk.
A post-install-cmd script runs during installation, increasing operational complexity and supply-chain exposure even though this signal alone does not establish malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Evgeniy Petrov |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.