baraja-core/plugin-system
This is a generally usable and transparently maintained package: it has existed since 2020, uses a stable major version, is not deprecated or archived, has a matching source repository, includes a license, and was released and pushed recently. The main concerns are limited recent activity, a single active contributor, no tests or changelog in either the artifact or repository, and workflow files without top-level token permissions. Organization ownership and a recent merged pull request provide some mitigation, but the package remains more dependent on a narrow maintenance base than a highly mature dependency.
72%
Total Score
70
78
90
Health Score Breakdown
Only one registry account has publish access, which is a concentration risk, but this is partly expected because the linked repository is owned by an organization.
The package includes a README and uses GitHub Releases, but neither the artifact nor repository contains tests or a changelog. This reduces verification and release transparency for a library dependency.
The package has a substantial history since September 2020 with 20 releases, but only one release in the last 12 months. The recent release is positive, while the low current cadence warrants some caution about maintenance pace.
All one recent commit came from a single contributor, creating a narrow operational bus factor. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.
There was one commit from one active maintainer in the last three months. The recent activity is better than complete inactivity, but the low volume suggests a slow maintenance pace.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jan Barášek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/di Version ^3.0 | — | — |
nette/http Version ^3.0 | — | — |
nette/utils Version ^3.2 || ^4.0 | — | — |
nette/caching Version ^3.1 | — | — |
baraja-core/service-method-invoker Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 27 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.