webrium/foxql
Tests, release notes, and recent commits provide useful maintenance evidence. Adoption still deserves care because ownership is concentrated and the repository does not clearly identify this package; the license metadata also conflicts.
68%
Total Score
88
100
88
75
Health Score Breakdown
The artifact contains a license file, but it is detected as MIT while the manifest declares Apache-2.0. The package is licensed, yet the mismatch creates avoidable legal ambiguity.
One contributor made about 93% of the 28 recent commits, leaving a thin practical contributor base. Organization backing and a second active contributor partly compensate, but concentration remains a maintenance risk.
The repository name does not match webrium/foxql and its README does not mention this package; although name mismatches can be normal in monorepos, both signals together make package provenance less clear.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a database library.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, a reproducibility and update-integrity hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 benjamin-khalife |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.