aplus/validation
The repository includes tests, security guidance, and a release record for this version. No commits were recorded in the last three months, and all four workflow actions are unpinned, leaving maintenance momentum and build reproducibility as concerns.
70%
Total Score
75
88
100
Health Score Breakdown
The package has 52 releases over about five years, but no releases in the last 12 months and its latest registry release was about 20 months ago. This indicates a meaningful maintenance slowdown, though the long release history provides some maturity.
No commits and no active maintainers were recorded during the last three months. The recent repository push is a compensating sign of availability, but it does not establish sustained development activity.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The single workflow was fully analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection risks. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Natan Felles |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aplus/debug Version ^4.3 | — | — |
aplus/helpers Version ^4.0 | — | — |
aplus/language Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.