verdient/shopline
Its small codebase has no tests or security scanning, and the repository has little adoption. The stable version and non-deprecated status help, but do not offset the maintenance and transparency concerns.
44%
Total Score
50
61
50
Health Score Breakdown
No license is declared, detected, or included in the package or repository. This creates a serious adoption and legal-transparency gap.
The package has only 3 releases, with none in the last 12 months; its latest release was over two years ago. This indicates a meaningful abandonment risk.
The artifact and repository contain no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README is a minor usability gap for this library.
The repository owner is a user account rather than an organization, so the short registry maintainer context is not compensated by clear organizational backing.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While this avoids an unresolved backlog, it also shows no evidence of an active community.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 verdient/http-api Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.