traderinteractive/util-time
Its MIT license, narrow runtime dependency, and tested source make the package straightforward to adopt. The very small user base and limited security process leave less evidence for long-term support.
58%
Total Score
50
100
80
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and reducing evidence of ongoing maintenance.
The package has four releases since March 2018, but none in the last 12 months and the latest was published in September 2022. This indicates a mature but inactive release line.
The repository has only 2 stars and 2 forks, so there is limited community evidence or backup support. Popularity is supporting evidence rather than a verdict, but it does not offset the maintenance gap.
The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and response-process gap, not evidence of a vulnerability.
The single workflow was fully analyzed with no audit findings or dangerous triggers, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure in the project automation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Chad Gray |
| Spencer Rinehart |
| Jonathan Gaillard |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.