yproximite/asset-dependency-bundle
The bundle includes tests, a usable README, and release notes for this version. Its small codebase has no security scanning or security policy, adding little assurance for future fixes.
12%
Total Score
50
44
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
The package has only two releases, with no release in more than eight years and no releases in the last 12 months. That strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its archived state.
The linked repository is archived and was last pushed in November 2017, indicating that active maintenance has ended.
Neither the package nor the linked repository declares or includes a recognizable license file. That creates a real legal and transparency gap for adopters.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Leech |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.