yuancode/esbuilder
The package has a usable README, tests, a matching repository, and an MIT license file. It lacks a security policy, and its small dependency footprint does not offset the maintenance uncertainty.
57%
Total Score
25
100
86
83
Health Score Breakdown
There were 0 commits and 0 active maintainers in the last 3 months, consistent with maintenance having stopped after September 2022. This is a meaningful abandonment concern for a library dependency.
The repository is owned by an individual user rather than an organization, providing limited visible organizational backing. That matters more here because recent commit activity is also absent.
The package has only 3 releases, with none in the last 12 months; the latest release was published on September 21, 2022. This indicates a long period without updates, although the stable v1.0.2 release remains available.
The repository uses Composer build tooling, but no security scanning tools were detected. The build setup is appropriate, while the missing scanning is a modest transparency and hygiene gap.
No security policy was found in the repository. This weakens the project's disclosure and maintenance transparency, though it is not by itself evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 yuan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 elasticsearch/elasticsearch Version ^5.4 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.