yiyu/conf
The dependency surface is small and there are no install-time scripts. Documentation, testing, security-policy, and repository activity are limited, leaving little evidence of ongoing maintenance or release support.
38%
Total Score
25
100
67
83
Health Score Breakdown
The latest release was about five years ago, with no releases in the last 12 months. That strongly raises abandonment risk despite a history of seven releases.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
The manifest declares Apache-2.0, but the artifact license file was detected as MIT. The release is licensed, but the mismatch creates avoidable legal uncertainty.
One registry account has publishing access. The repository is user-owned rather than organization-backed, so the single-person maintenance base adds some continuity risk.
The package has no README, tests, or changelog, and no release notes for this version. Missing tests and changelogs are normal in published artifacts, but the absent README weakens consumer guidance for a library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 liangjiegao |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.