Package Health

21torr/hosting

A changelog, repository tests, and release notes improve transparency, while the package has no install-time scripts. Workflow actions are unpinned, and the repository lacks both a security policy and security scanning.

Latest 4.4.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo bus factorcaution

One contributor made about 73% of recent commits, which creates some concentration risk. Two additional contributors remained active, and the organization-owned project provides some handoff capacity.

Repo popularitycaution

The repository has 0 stars and 1 fork, indicating limited public adoption. Popularity is supporting evidence rather than a decisive health measure, so this is only a minor concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning reduces assurance about automated security oversight.

Security policycaution

The repository has no SECURITY.md or other security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. Unpinned actions are a mild reproducibility and workflow supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

21TORR

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3.0
—
—
21torr/cli
Version ^1.2.4
—
—
symfony/cache
Version ^8.0
—
—
symfony/clock
Version ^8.0
—
—
symfony/config
Version ^8.0
—
—

Weekly Downloads

Info

Last Published
12 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform