yaoyue/addon
The single maintainer and absent security policy leave little evidence of ongoing support. The stable version, explicit license, and minimal dependency footprint are positives, but they do not offset the package's age and thin documentation.
42%
Total Score
50
100
64
75
Health Score Breakdown
This is the package's only release, published over five years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the stable 1.0.0 version.
Only one registry maintainer is listed. This does not prove weak project ownership, but it indicates limited publishing redundancy when paired with the old release history.
The artifact has a README, but it is only eight characters long; the release notes provide a small positive for version documentation, while consumer guidance remains very thin.
The repository name matches the package, but its README does not mention the package. That weakens confidence that the repository clearly documents this package's intended use.
The repository is not archived, but it was last pushed over five years ago, providing little evidence of recent maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 yubin |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.