wekode/repository
The package has a readable guide and a small dependency footprint. Its source has had no commits for nearly five years, has no tests or security policy, and its declared MIT license conflicts with the GPL-3.0 license file. Pinning this release leaves maintenance and licensing questions unresolved.
40%
Total Score
0
100
56
50
Health Score Breakdown
The manifest declares MIT, but the artifact license file is recognized as GPL-3.0; although license files exist in both the artifact and repository, the mismatch creates a real licensing concern.
The package has released nothing in the last 12 months, and its latest release was nearly five years ago. The five-release history shows an early burst followed by prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating a strong abandonment risk.
The package declares a post-install command, which adds install-time behavior and deserves scrutiny, but this signal alone does not show unsafe behavior.
A readable 1,599-character README and GitHub release for this version help consumers, but the package and repository have no tests or changelog. The missing tests reduce confidence in future changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 zakariaMogh |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.