bansalakhil/stapler
The package is well documented, licensed, and covered by tests, with no install scripts or deprecation notice. Its long inactivity leaves maintenance and compatibility risk for a file-upload dependency.
52%
Total Score
25
100
72
75
Health Score Breakdown
The package has had no release in more than 7 years and no releases in the last 12 months. Its 26-release history shows earlier activity, but the prolonged pause is a substantial maintenance concern.
There were no commits and no active maintainers in the last 3 months, consistent with more than 7 years without a release. This is the strongest evidence of abandonment risk.
The package and repository are owned by the same individual account, which is coherent project backing. A single-person project also gives limited redundancy if the maintainer is inactive.
The repository reports zero stars, forks, and watchers, providing no supporting evidence of a broad active community. Popularity is only supporting evidence, so this is a secondary concern.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence of unsafe code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Travis Bennett |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 imagine/imagine Version ~0.6.2 | — | — |
doctrine/inflector Version ~1 | — | — |
symfony/http-foundation Version ~4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.