black/user
The MIT license, bundled README, and matching repository support basic transparency. Seven runtime dependencies and no security scanning add maintenance overhead, but the larger concern is that this release is effectively unmaintained.
24%
Total Score
0
50
75
50
Health Score Breakdown
The package has only one release, published nearly 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need compatibility or security updates.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long-stalled release history and leaving little evidence of ongoing maintenance.
Seven runtime dependencies create a meaningful compatibility and maintenance surface for an old package, with no provided evidence that this dependency set is being kept current.
Composer is used for the build, but no security-scanning tool is present in the repository. This is a modest transparency and maintenance weakness rather than proof of a vulnerability.
The repository has no security policy, so there is no documented process for reporting or handling security issues.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexandre Balmes |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 black/email Version ~1.0 | — | — |
black/common Version ~2.0.0 | — | — |
monolog/monolog Version ~1.10 | — | — |
symfony/http-kernel Version ~2.5 | — | — |
symfony/http-foundation Version ~2.5 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.