webkul/aliexpress
The package is small and easy to inspect, with no install-time scripts and a repository that matches the package. Its license metadata conflicts with the MIT license file, while the project has no tests, security policy, or recent development activity.
48%
Total Score
0
69
75
Health Score Breakdown
Only two releases exist, and none were published in the last 12 months; the latest release was nearly two years ago. This is meaningful abandonment risk for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, with no other provided maintenance signal compensating for the inactivity.
A license file is present, but the declared OSL-3.0/AFL-3.0 licenses conflict with the detected MIT license in that file. The release is licensed, but the mismatch reduces transparency.
The repository has only 1 star and 1 fork, providing little evidence of broad community adoption or outside maintenance capacity.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene gap, not a standalone dependency blocker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.