spinit/crypto-channel
It includes tests, a README, and no install-time scripts, while organization backing provides some continuity. The declared LGPL license differs from the detected GPL license, so verify licensing before adoption.
42%
Total Score
50
50
75
Health Score Breakdown
The package has only one release, published in December 2018, and no releases in nearly eight years. That strongly indicates abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance.
A license file is present, but the manifest declares LGPL-3.0 while the detected file identifies GPL-3.0. The mismatch should be resolved because it affects how downstream code may be used and distributed.
The repository has no security policy. This is a transparency and reporting gap, although it is less significant than the extended lack of release and commit activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ermanno Astolfi |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.