Lower score in "up-to-date dependencies" if direct dependency is "discontinued"

[sigurdm]

Depending on a discontinued package is not healthy for the ecosystem in the long run

It could be seen as equivalent to not allowing the latest version of a dependency in your constraint.

cc @kevmoo @mit-mit

[Rexios80]

I'm not sure about this. It's possible for a package to be marked as "discontinued" and still be fully functional.

[sigurdm]

I'm not sure about this. It's possible for a package to be marked as "discontinued" and still be fully functional.

(opinions:)

While this is true, it is not healthy in the long run.

Several things are potentially fully functional (such as having false positive warnings, not allowing the latest version of a dependency),

We still want package authors to react to these and move the ecosystem forwards.