pkgrisk 0.1.0

5-second package health and risk analysis for npm, PyPI and crates.io dependencies
1
2
3
4
5
6
7
8
9
10
11
12
13

pub fn calculate(known_vulns: usize, dependencies_count: usize) -> u8 {
    if known_vulns > 0 {
        return 0;
    }
    
    if dependencies_count > 50 {
        return 50;
    } else if dependencies_count > 10 {
        return 80;
    }
    
    100
}