Package Health

acdh-oeaw/uri-normalizer

The package is well documented and tested, and organization ownership provides useful continuity. Recent work is concentrated in one contributor, and workflow dependencies are not pinned.

Latest 4.3.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo bus factorcaution

One contributor made all 3 commits in the last 3 months, giving the project a concentrated maintenance base. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Security policycaution

No repository security policy was found. This is a modest transparency gap for a maintained library, but it is not evidence of abandonment by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or audit failures. However, both action references are unpinned, leaving dependency versions exposed to upstream changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mateusz Żółtak

Direct Dependencies

DependencyLast ReleaseScore
psr/simple-cache
Version ^3.0
—
—
guzzlehttp/guzzle
Version ^7.5
—
—
sweetrdf/quick-rdf
Version ^2
—
—
zozlak/http-accept
Version ^1
—
—
sweetrdf/quick-rdf-io
Version ^1.0.7
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform