xiaodi/carfriend
The package offers almost no consumer documentation, and its single maintainer has no visible security scanning. It is not deprecated or archived, but future fixes appear unlikely without renewed activity.
35%
Total Score
0
57
50
Health Score Breakdown
The package has had only two releases, both on December 18, 2020, with no release in more than five years. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long-term lack of maintenance activity.
No license is declared, no license file is present in the package, and the repository also has no license file. This leaves redistribution and usage rights unclear.
A README exists but contains only seven characters, providing essentially no integration or usage guidance. The absence of tests and a changelog in the published artifact is normal packaging practice.
The repository name does not match the package name and its README does not mention the package, so the source relationship is not transparently established.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 EdenLenug |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.5.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.