Class for easy generation o’ Content Security Policy header.
48%
Total Score
unhealthy
Risky to adopt: it has had no release activity since 2019 and lacks a security policy.
The package has had no releases in the past 12 months, and its latest release was in December 2019. That long period without updates raises abandonment and compatibility concerns.
A license file is present, so this is not an unlicensed release, but the manifest declares GPL-3.0-or-later while the detected license file identifies AGPL-3.0. The mismatch needs clarification before adoption.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption or review signal to offset the stale maintenance picture.
The repository is not archived, which is a positive, but it was last pushed in December 2019. The repository's active status does not compensate for the prolonged lack of maintenance activity.
The linked repository has no security policy. For a package that generates Content Security Policy headers, the absence of a documented vulnerability-reporting process is a meaningful transparency gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.