Package Health

blessed-alliance/aim-world-component

The source includes tests and a clear MIT license, but has no security policy and no automated workflow coverage. The linked repository does not name the package, making ownership less transparent.

Latest 0.4.1PackagistPackagist

36%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

The package was last released on June 28, 2016, with no releases in the last 12 months and an age of about 10 years. This is strong evidence of abandonment for a package intended as an application module.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These add install-time execution and supply-chain exposure, although this signal alone does not show that the scripts are unsafe.

Package scaffoldingcaution

The artifact includes a README and tests, and the repository has tests; the missing changelog is normal packaging practice. The README is only 110 characters and includes a TODO, leaving consumer guidance thin.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. A monorepo sub-package could explain the mismatch, but the collected evidence leaves package ownership less transparent.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gab Amba

Direct Dependencies

DependencyLast ReleaseScore
roave/security-advisories
Version dev-master
—
—
codingmatters/site-module-ini
Version ^1.0 || ~0.6
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform