Package Health

acalvino4/craft-boilerplate

The README, changelog, and release notes make the snapshot understandable, and the repository still matches the package. Its single-user ownership, absent security policy, and lack of recent activity leave maintenance and response capacity weak.

Latest 0.1.1PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has only 2 releases, both published on April 5, 2023, and none in the last 12 months; this is strong evidence of an inactive release line.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history's prolonged inactivity.

Dependency profilecaution

Seven runtime dependencies make this a meaningful dependency bundle rather than a minimal template, increasing the maintenance surface even though no dependency red flag is shown.

Lifecycle scriptscaution

A post-root-package-install script runs during installation, adding execution behavior that consumers should understand before adopting the package.

Project backingcaution

The package and repository are owned by the same individual account, with no organization backing shown; this indicates limited visible continuity capacity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Augustine Calvino

Direct Dependencies

DependencyLast ReleaseScore
craftcms/cms
Version ^4.4.0
—
—
verbb/navigation
Version 2.0.17
—
—
vlucas/phpdotenv
Version ^5.4.0
—
—
yiisoft/yii2-redis
Version ^2.0
—
—
nystudio107/craft-vite
Version 4.0.5
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform