django-bom

v1.234

A simple Django app to manage a bill of materials. For more information about how to use this package see README

Latest version published 1 year ago
License: GPL-3.0

Ensure you're using the healthiest python packages

Snyk scans all the packages in your projects for vulnerabilities and provides automated fix advice

Package Health Score

47 / 100

Popularity

Small
GitHub Stars
105
Forks
40
Contributors
8

Direct Usage Popularity


Based on project statistics from the GitHub repository for the PyPI package django-bom, we found that it has been starred 105 times.

Security

Security review needed
Powered by Snyk
1.234 (Latest)

Security and license risk for latest version

Release Date
Nov 11, 2023
Direct Vulnerabilities
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
Indirect Vulnerabilities
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
License Risk
  • 1
    H
  • 5
    M
  • 0
    L
All security vulnerabilities belong to production dependencies of direct and indirect packages.

License
GPL-3.0
Alert

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.


Security Policy
No

We found a way for you to contribute to the project! Looks like django-bom is missing a security policy.


You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

Commit Frequency

Open Issues
15
Open PR
3
Last Release
1 year ago
Last Commit
1 year ago

Further analysis of the maintenance status of django-bom based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for django-bom is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Community

Sustainable
Readme
Yes
Contributing.md
Yes
Code of Conduct
No
Contributors
8
Funding
Yes

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like django-bom is missing a Code of Conduct.


Embed Package Health Score Badge

package health: 47/100 package health 47/100

Package

Python Versions Compatibility
==3.7.*

Age
7 years
Latest Release
1 year ago
Dependencies
5 Direct / 40 Total
Versions
299
Maintainers
1
Wheels
No