zorx/zipper
The package has a clear Apache-2.0 license, tests, and a useful README. Its small dependency set and lack of install scripts reduce exposure, but these positives do not offset the long abandonment gap.
39%
Total Score
50
100
75
75
Health Score Breakdown
The latest release was published in June 2016, with no releases in the last 12 months despite the package being over 10 years old. This is strong evidence of abandonment risk.
There were no new or merged pull requests and no issue activity in the last month. Combined with the repository's age, this supports concern about ongoing maintenance.
The linked repository is not archived, but its last push was also in June 2016, so its active status does not compensate for the lack of recent maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a secondary transparency gap beside the much larger maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nils Plaschke |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version 5.x | — | — |
illuminate/filesystem Version 5.x | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.