ardenexal/fhir-metadata
The package includes tests, a useful README, and a source repository that matches its name. MIT licensing and seven releases in about five months are reassuring, but no commits or active maintainers were observed in the last three months, and repository security controls are limited.
65%
Total Score
50
100
83
83
Health Score Breakdown
Zero commits and zero active maintainers were observed over the last three months. This conflicts with the recent release cadence and raises concern that publishing may be outpacing visible development.
The repository has no stars, forks, or watchers. For a package only about five months old, this is weak supporting evidence but not decisive on its own.
Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving no documented path for reporting vulnerabilities or describing security practices.
Version 0.6.1 is not a stable-major release, so compatibility expectations are lower, although it is not marked as a prerelease and recent releases are consistently stable.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 FHIR Tools Contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^3.0 | — | — |
symfony/finder Version ^6.4|^7.4 | — | — |
symfony/validator Version ^6.4|^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.