ydg/pangolin-sdk
It has an MIT license, tests, release notes, and a repository that matches the package. There is no security policy or automated security scanning, leaving limited evidence of ongoing oversight.
60%
Total Score
50
80
50
Health Score Breakdown
The package has five releases since December 2023, but none in the last 12 months and the latest release was January 6, 2025. This indicates a meaningful maintenance slowdown, though it is not proof of abandonment alone.
The repository recorded zero commits and zero active maintainers in the last three months. That supports the release-history concern and leaves little evidence of current maintenance capacity.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest oversight gap rather than a severe dependency risk by itself.
The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, with no provided compensating security process.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ydg |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ydg/foudation-sdk Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.