alairock/domainvalidation
It includes tests, a changelog, and a matching repository, but its install scripts and license mismatch add friction. Pinning this release is difficult to justify for a new dependency.
18%
Total Score
0
50
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement supplied. This is a severe adoption and abandonment risk for a dependency.
The package has only 3 releases, all from January–February 2014, with no release in more than 12 years. That indicates long-term abandonment rather than a maintained stable cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release silence. The linked repository being unarchived does not compensate for absent recent work.
The manifest declares GPL-2.0+, while the artifact license file was detected as MIT; the mismatch creates legal ambiguity even though a license file is present. No maintenance fee is reported.
The package defines post-install-cmd and post-update-cmd scripts, so installation and updates execute package-defined commands. This is a supply-chain and reproducibility concern, especially for an otherwise abandoned package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mockery/mockery Version >=0.7.2 | — | — |
phpunit/phpunit Version 3.7.* | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.