afzal-sabbir/todolist
The MIT license and single Composer dependency make the package straightforward to inspect and install. Its repository has no security policy, and the repository name does not match the package name, reducing transparency.
38%
Total Score
57
50
Health Score Breakdown
This package has only one release, published about 5 years and 10 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the repository still being available.
The repository name does not match the package name, and no README package mention was available. Although name differences can occur in subpackages, this leaves uncertainty about whether the linked repository is the package's actual home.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these counts provide no meaningful community-maintenance signal.
The repository is not archived, which preserves a path for maintenance. However, its last push was about 5 years and 10 months ago, so this does not overcome the inactive release history.
The linked repository has no security policy. For a package intended to be installed as application code, this is a transparency and maintenance-process gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Afzal Sabbir |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravelcollective/html Version ^5.5 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.