alexxxxx/demo
Its MIT license and lack of install-time scripts reduce adoption risk. The tiny artifact has no README or tests, while the single-user project provides little evidence of ongoing maintenance.
42%
Total Score
0
69
75
Health Score Breakdown
The package has only one release, published about five years ago, with no releases in the last 12 months. This is strong evidence of an inactive project, although a stable one-release package can sometimes be intentionally complete.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's long period without releases. No provided maintenance signal compensates for that inactivity.
The artifact has no README, tests, or changelog, though the exact release has GitHub release notes and the package is a small Composer artifact. The missing consumer documentation and tests still reduce transparency and confidence.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no additional evidence of community support.
Composer is used for builds, which is appropriate, but no security scanning tools were detected. For a small project this is a modest transparency gap rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alex Tsai |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.