best-served-cold/reflection
The small dependency footprint and included README and repository tests make evaluation straightforward. There is no deprecation or install-time script, but the project offers little recent maintenance evidence.
42%
Total Score
0
100
69
75
Health Score Breakdown
The package has had no release in more than 9 years: its latest release was in March 2017, with zero releases in the last 12 months. The four-release history shows an established but now inactive release line.
There were no commits and no active maintainers in the last 3 months, consistent with a project that has been inactive for more than 9 years.
The manifest declares MIT, while the artifact license file is detected as GPL-2.0; although license files are present in both the artifact and repository, this unresolved mismatch creates adoption and compliance risk.
Composer build tooling is present, but no security scanning tooling was detected. For this small, long-inactive package, that is a minor transparency and maintenance concern rather than a severe risk.
The linked repository is not archived, but its last push was in March 2017, so the unarchived status does not offset the evidence of prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adam Lewis |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.