alanrezende/nfse-londrina
The package has a clear README, MIT licensing, and no install-time scripts. Its only release was in February 2023, the repository has had no recent commits, and it does not identify the package in its README.
45%
Total Score
0
75
75
Health Score Breakdown
This package has only one release, published in February 2023, with no releases in the last 12 months. That is strong evidence of a stalled project for a package intended as a maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the project having been inactive since March 2023. This materially increases abandonment risk.
The repository name does not match the package name and its README does not mention the package. This weakens confidence that the linked repository is the authoritative source for this release.
The repository uses Composer build tooling, but it has no security-scanning tools. The missing scanning is a modest transparency and maintenance concern, not a standalone reason to reject the package.
The repository has no security policy. For a small generated client this is a limited gap, but it leaves no documented process for reporting or handling security issues.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wsdltophp/packagebase Version ~5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.