Package Health

baraja-core/structured-api

This is a mature, stable, actively published package with a correctly matched repository, clear documentation, an included license, no deprecation, and no install-time lifecycle scripts. However, maintenance momentum is currently thin: only one release occurred in the last 12 months, repository activity shows one commit from one contributor in the last three months, and the artifact and repository contain neither tests nor a changelog. The organization-owned repository and security policy provide some backing, while workflow analysis found no dangerous patterns, but absent security scanning and undeclared workflow token permissions leave hygiene gaps. Suitable for use with normal dependency monitoring, but not as a low-risk, heavily relied-on foundation without additional validation.

Latest v4.1.2PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Dependency profilecaution

Twelve runtime dependencies, including several framework and Baraja components, create a meaningful dependency surface. The profile is coherent for a Nette-integrated API framework, but it increases transitive maintenance exposure.

Maintainerscaution

Only one registry account has publish access, which is a concentration risk, though the repository is owned by an organization that can provide some operational backing.

Package scaffoldingcaution

The package has a substantial README, but neither the artifact nor repository contains tests or a changelog. GitHub Releases provide some release transparency, but the lack of tests is still a maintenance and regression risk.

Release historycaution

The project has existed for about 6 years 8 months with 70 releases, but only one release in the last 12 months indicates substantially slower recent publishing than its historical cadence.

Repo bus factorcaution

All recent commits come from one contributor, creating a low short-term bus factor. Organization ownership provides some ability to transfer maintenance, but no second active contributor is evidenced.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jan Barášek

Direct Dependencies

DependencyLast ReleaseScore
nette/di
Version ^3.0
—
—
nette/http
Version ^3.1
—
—
nette/caching
Version ^3.1
—
—
baraja-core/url
Version ^1.1
—
—
nette/application
Version ^3.1
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform