Package Health

b13/tag

The package is clearly documented and tied to an organization-owned repository, but release and commit activity are weak. Workflow permissions and unpinned actions add modest maintenance hygiene concerns, while licensing and repository ownership are in order.

Latest 1.2.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

Only two releases are recorded, with the latest on May 30, 2023 and none in the last 12 months; the long median interval indicates a slow release cadence and raises maintenance concerns.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which is a meaningful sign of limited current maintenance capacity despite the recent repository push timestamp.

Repo issue activitycaution

There are no new or closed issues in the last month and five open pull requests with no merges, suggesting limited visible project throughput.

Repo toolingcaution

The repository uses Composer for builds but has no detected security scanning tools, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

No security policy is present in the repository, reducing the clarity of vulnerability-reporting and response practices.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
doctrine/dbal
Version ^2.13 || ^3.0
—
—
typo3/cms-core
Version ^11.0 || ^12.0
—
—
typo3/cms-backend
Version ^11.0 || ^12.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform