andreibesleaga/zfeeder
Strong documentation, an explicit security policy, and release tooling improve transparency. The single-person project and unpinned CI actions leave maintenance and build-reproducibility concerns.
69%
Total Score
50
50
94
100
Health Score Breakdown
The package declares 17 runtime dependencies, including several framework and feed-processing components; this is a meaningful dependency surface, though the signal provides no evidence that it is unmanaged.
Only one registry account has publishing access. Because the repository is user-owned rather than organization-backed, this represents a thin publishing base and increases continuity risk.
The registry namespace and repository are owned by the same individual, confirming consistent ownership but providing no organizational backing to offset the single-maintainer risk.
Only two releases exist and the package is less than one day old, so there is not yet evidence of sustained release maintenance.
There were no commits or active maintainers in the last three months. The repository was only recently pushed and the package is newly released, so this indicates limited history rather than proven abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrei N. Besleaga |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
twig/twig Version ^3.14 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
symfony/console Version ^7.1 | — | — |
psr/http-message Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 hours ago
- Created
- 21 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.