2hats/dropbox-digital-assets-integration
The package includes tests, a usable README, and a stable 1.0 release. Its license evidence conflicts, and there is no security policy or scanning, increasing maintenance and transparency concerns.
56%
Total Score
33
100
75
88
Health Score Breakdown
This is a single-release package first and last released in March 2022, with no releases in the last 12 months; that indicates limited ongoing maintenance.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive since March 2022 and raising abandonment risk.
A license file is present in both the artifact and repository, but the manifest declares GPL-3.0+ while the detected file license is MIT; the mismatch needs clarification before adoption.
Only one registry publishing maintainer is listed, which gives the package a thin publishing base; the linked repository does not provide evidence of a broader active maintainer group.
The package and repository are linked to the same named project, but the repository owner is an individual account rather than a verified organization-backed project; this provides limited backing evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 2Hats Logic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pimcore/pimcore Version ^10.0 | — | — |
guzzlehttp/guzzle Version ~7.2.0 | — | — |
kunalvarma05/dropbox-php-sdk Version ^0.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.