steve-moretz/lumen-vendor-publish-command
The package is small and easy to inspect, with a README, changelog, stable version, and no install scripts. Its missing license and lack of security policy reduce transparency, while the single-maintainer project has no recent activity.
42%
Total Score
38
75
88
Health Score Breakdown
This is the sole release, published about five years ago, with no releases in the last 12 months. That strongly increases abandonment risk, despite the package remaining non-deprecated.
There were no commits or active maintainers in the last three months, consistent with a project that has been inactive since October 2021.
No declared license, license file, or repository license file was detected. This creates a material transparency and adoption concern for an open-source dependency.
Only one registry maintainer is listed, leaving a thin publishing base. The repository is also owned by an individual rather than an organization, so there is no visible backing to compensate.
The source repository is owned by an individual account, with no organization backing shown. That leaves maintenance continuity dependent on a single project owner.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sm.steve.moretz |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.