yunzhiyike/chat-gpt
The package includes a usable README, tests, and a small dependency set, with no install-time scripts. Its license records conflict, and the linked project has no security policy or recent activity to support ongoing maintenance.
42%
Total Score
0
100
71
83
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was over two years ago. This is strong evidence of stalled maintenance for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history concern rather than compensating for it.
The package declares MIT, but the detected LICENSE file is Apache-2.0. The release is licensed, yet the mismatch creates avoidable legal uncertainty.
The repository name does not match the package name and its README does not mention the package, so the linked source may not clearly correspond to this release.
The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a maintenance-transparency gap, though not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 云知易客 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.