barth/dev-pack
Its MIT license, clear README, matching repository, and stable version make the package easy to understand. The tiny user base and absent security policy add modest maintenance and transparency concerns.
40%
Total Score
50
83
67
Health Score Breakdown
The latest release was published over seven years ago, with no releases in the past 12 months. The four-release history shows a real abandonment concern despite the stable version.
The repository recorded zero commits and zero active maintainers in the past three months, and its last push was over five years ago. This strongly limits evidence of ongoing maintenance.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little evidence of a broad community that could compensate for the stale maintenance record.
No repository security policy was found. This is a transparency gap, though it is less serious because the package is a development-tool pack rather than a security-sensitive runtime library.
The single workflow was fully analyzed with no audit findings or untrusted sinks, but both action references are unpinned. The missing top-level permissions block is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jibé Barth |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpmd/phpmd Version ^2.6 | — | — |
phpro/grumphp Version ^0.14.2 | — | — |
seld/jsonlint Version ^1.7 | — | — |
j13k/yaml-lint Version ^1.1 | — | — |
sclable/xml-lint Version ^0.2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.