bnomei/autoloader-for-kirby
The package has a clear README, an MIT license, repository tests, and no install-time scripts. It lacks a security policy, uses all 10 GitHub Actions references without pinning, and one workflow relies on an archived action.
58%
Total Score
50
100
88
67
Health Score Breakdown
The registry namespace and repository are owned by the same individual, so the package has direct ownership alignment but a limited apparent organizational backing structure.
The package has 37 releases over roughly five years, but its latest release was in December 2024 and there were no releases in the following 12 months, which weakens maintenance confidence.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating possible abandonment risk.
There are no open issues or pull requests, but there was also no new or closed issue or pull-request activity in the last month; this provides little evidence of ongoing maintenance.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest verification gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bruno Meilick |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^7.0 | — | — |
symfony/finder Version ^7.0 | — | — |
mustangostang/spyc Version ^0.6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.