Package Health

akyos/akyos-updates

This release appears usable but is not yet a mature, broadly transparent dependency. The repository is active, unarchived, has 19 commits from two contributors in the last three months, includes tests, and has a stable non-prerelease version with no registry deprecation. However, the package is only 62 days old, has very low repository adoption, highly concentrated contribution activity, no README or changelog, no security policy or security scanning, and a proprietary manifest license that limits its fit for projects expecting an open-source dependency. Overall, adoption is reasonable with maintainer due diligence, but the package carries meaningful maturity, documentation, governance, and continuity risks.

Latest v1.2.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Licensecaution

The package declares a proprietary license in its manifest, so this is not a missing-license transparency gap; however, the proprietary terms may be unsuitable for projects requiring an open-source license.

Package scaffoldingcaution

Tests exist both in the artifact and repository, and GitHub Releases provide some release documentation coverage. The missing README and changelog still reduce usability and transparency for a package intended to be adopted as a dependency.

Project backingcaution

The repository is owned by a personal GitHub account rather than an organization account. This does not establish inadequate backing, but it means the concentrated contributor activity has less visible organizational redundancy to compensate for it.

Release historycaution

The package is young at 62 days with four releases, and its recent release cadence is very rapid, with a median interval of about 49 minutes. This demonstrates activity but leaves limited evidence of long-term maintenance and may indicate rapid iteration.

Repo bus factorcaution

Two contributors are active, but the leading contributor made 16 of 19 commits, or about 84%, leaving maintenance substantially concentrated. The second contributor provides some continuity but does not eliminate the bus-factor concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
woocommerce/action-scheduler
Version ^3.7
—
—

Weekly Downloads

Info

Last Published
23 days ago
Created
2 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform