andydefer/php-vo
A security policy is absent, and the package remains below a stable major version despite substantial recent activity. MIT licensing, repository tests, and build and security tooling provide useful compensating evidence.
68%
Total Score
67
100
94
75
Health Score Breakdown
The repository is owned by the individual user and not an organization, so the single-maintainer and single-contributor concentration is not offset by visible organizational backing.
One contributor made all 30 commits in the last three months, giving the project a complete single-contributor concentration. This leaves little demonstrated redundancy if that maintainer stops work.
No SECURITY.md or other repository security policy was found. For a reusable library this reduces transparency around vulnerability reporting, though security scanning is present.
Version v0.24.0 is not a stable major release, so compatibility may still change. It is not a prerelease and recent releases contain no prereleases, which partly offsets the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andy Defer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 andydefer/domain-structures Version ^1.28.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.