simplerest/stub-framework
The MIT license, small dependency surface, release notes, and readme provide basic transparency. Nearly three years without a release or repository commit leaves maintenance and abandonment risk too high for a dependable library dependency.
42%
Total Score
0
63
67
Health Score Breakdown
The package has had no release in nearly three years and none in the last 12 months, despite 14 releases overall. Its earlier rapid cadence does not compensate for the prolonged pause.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.
One star and no forks provide very limited independent adoption or review support. Popularity is only supporting evidence, but this offers little compensation for the maintenance gap.
The linked repository has no security policy or security-scanning tooling, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern beside the maintenance risk.
The single workflow was fully analyzed and uses read-only job permissions with no detected dangerous sinks, but both of its action references are unpinned, leaving avoidable build-reproducibility risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dmitry Veremeenko |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.