typedduck/steins
Rapid releases, strong repository tests and release notes, and organizational ownership support ongoing work. All workflow actions are unpinned and no security policy is present, so supply-chain hygiene remains weaker than the maintenance pace.
65%
Total Score
90
100
83
75
Health Score Breakdown
The release declares Apache-2.0 and includes recognized license files, so it is clearly licensed. The artifact also contains MIT text not covered by the declaration, which creates a minor licensing clarity concern.
All 1,249 recent commits came from one contributor, leaving no demonstrated contributor redundancy. Organization ownership offers some handoff capacity, but no second active contributor is shown.
The project uses Composer, but no security-scanning tools were detected. The lack of scanning is a modest transparency and hygiene gap rather than evidence of abandonment.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
Version v0.1.8 is not a stable-major release, so compatibility may still change. It is not marked as a prerelease, and the recent release cadence provides some compensating evidence of active development.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 USAMI Kenta |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typedduck/steins-attributes Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.