Package Health Score

75 / 100

security
Security review needed
popularity
Small
maintenance
Healthy
community
Active

Popularity

Small

GitHub Stars: 32
Forks: 20
Contributors: 20

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package fosslight-dependency, we found that it has been starred 32 times.

Security

Security review needed

Security and license risk for latest version

Release Date: Oct 30, 2024
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 2
H
7
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

Apache-2.0

Security Policy

We found a way for you to contribute to the project! Looks like fosslight-dependency is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Healthy

Commit Frequency

Open Issues: 7
Open PR: 2
Last Release: 25 days ago
Last Commit: 5 days ago

Further analysis of the maintenance status of fosslight-dependency based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that fosslight-dependency demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 20
Funding: No

With more than 10 contributors for the fosslight-dependency repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: ==3.6.*, ==3.7.*, ==3.8.*, ==3.9.*

Age: 4 years
Latest Release: 25 days ago
Dependencies: 12 Direct / 79 Total
Versions: 70
Maintainers: 2
Wheels: OS Independent

Readme

FOSSLight Dependency Scanner

<img alt="License" src="https://img.shields.io/pypi/l/fosslight_dependency"> <a href="https://pypi.org/project/fosslight-dependency/"><img alt="Current python package version." src="https://img.shields.io/pypi/v/fosslight_dependency">``</a> <img src="https://img.shields.io/pypi/pyversions/fosslight_dependency">

💡 Introduction

This is the tool that supports the analysis of dependencies for multiple package managers. It detects the manifest file of package managers automatically and analyzes the dependencies with using open source tools. Then, it generates the report file that contains OSS information of dependencies.

📖 User Guide

We describe the user guide in the FOSSLight Guide page. In this user guide, you can see how to install the FOSSLight Dependency Scanner and how to set up the prerequisite step and run it according to the package manager of your project. Also, you can check the results of the FOSSLight Dependency Scanner.

👀 Package Support Level

Language/ Project	Package Manager	Manifest file	Direct dependencies	Transitive dependencies	Relationship of dependencies (Dependencies of each dependency)
Javascript	Npm	package.json	O	O	O
Java	Gradle	build.gradle	O	O	O
Java	Maven	pom.xml	O	O	O
Java (Android)	Gradle	build.gradle	O	O	O
ObjC, Swift (iOS)	Cocoapods	Podfile.lock	O	O	O
ObjC, Swift (iOS)	Carthage	Cartfile.resolved	O	O	X
Swift (iOS)	Swift	Package.resolved	O	O	O
Dart, Flutter	Pub	pubspec.yaml	O	O	O
Go	Go	go.mod	O	O	O
Python	Pypi	requirements.txt, setup.py, pyproject.toml	O	O	O
.NET	Nuget	packages.config, obj/project.assets.json	O	O	O
Kubernetes	Helm	Chart.yaml	O	X	X
Unity	Unity	Library/PackageManager/ProjectCache	O	O	X
Rust	Cargo	Cargo.toml	O	O	O

👏 Contributing Guide

We always welcome your contributions. Please see the CONTRIBUTING guide for how to contribute.

📄 License

fosslight-dependency dependencies

beautifulsoup4 defusedxml igraph lastversion lxml matplotlib openpyxl packageurl-python pygithub pyyaml requirements-parser virtualenv

FAQs

What is fosslight-dependency?

FOSSLight Dependency Scanner. Visit Snyk Advisor to see a full health score report for fosslight-dependency, including popularity, security, maintenance & community analysis.

Is fosslight-dependency popular?

The python package fosslight-dependency receives a total of 1,072 weekly downloads. As such, fosslight-dependency popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is fosslight-dependency well maintained?

We found that fosslight-dependency demonstrated a healthy version release cadence and project activity. It has a community of 20 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is fosslight-dependency safe to use?

While scanning the latest version of fosslight-dependency, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 24 November-2024, at 09:44 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

fosslight-dependency