advancedhosters/hidev-vendor
Its proprietary license is explicit, and the package includes tests, a changelog, and release notes. The organization-backed repository is not archived, but its name and README do not identify this package; verify the source before adopting.
55%
Total Score
75
100
70
75
Health Score Breakdown
The package has had no registry release since June 2017, despite seven releases overall. This is strong evidence of an aging dependency, although the linked repository was pushed more recently.
The repository recorded zero commits and zero active maintainers in the last three months, providing no current maintenance evidence. The recent repository push date is a limited compensating signal but does not show ongoing development.
The repository name does not match the package name and its README does not mention this package, so the source relationship is not clearly documented. That weakens transparency even though the repository is under the expected organization.
The repository has no security policy. This is a modest transparency gap, though the package is small and the available evidence does not indicate a specific security process failure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrii Vasyliev |
| Dmitry Naumenko |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hiqdev/composer-config-plugin Version <2.0 || dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.