pkgrisk 0.1.0

5-second package health and risk analysis for npm, PyPI and crates.io dependencies
1
2
3
4
5
6
7
8
9
10
11
12
13
14

use crate::ecosystems::PackageMetadata;

pub fn calculate(metadata: &PackageMetadata) -> u8 {
    if let Some(date) = &metadata.latest_release_date {
        if date.starts_with("2026") || date.starts_with("2025") || date.starts_with("2024") {
            return 90;
        } else if date.starts_with("2023") {
            return 60;
        } else {
            return 20;
        }
    }
    50
}