awd-studio/es-lib
The package has a clear MIT license, repository tests, a useful README, and read-only workflow permissions. Install and update hooks add operational complexity, while the single-maintainer project lacks a security policy.
53%
Total Score
25
71
50
Health Score Breakdown
The package made 17 releases quickly, but has had no release in the last 12 months; its latest release was about 15 months ago. This suggests maintenance has stopped despite the initially active cadence.
There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. This is strong evidence of stalled maintenance.
The package runs post-install and post-update scripts, adding execution during dependency operations. The signal does not show those scripts are malicious, but they increase installation complexity and trust requirements.
Only one registry account has publishing access. With no organization backing shown and no recent repository activity, this leaves a thin operational base and increases continuity risk.
The repository uses Composer and Make, but has no security-scanning tools. That is a modest transparency and maintenance gap, not evidence that the package is unsafe by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Anton Karpov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/uid Version ^7.1 | — | — |
psr/container Version ^2.0 | — | — |
awd-studio/vo-date-time Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.