box-project/processor
The package includes a useful README, extensive tests, and a clear MIT license. Its narrow dependency set is reasonable, but there is no current maintenance or security-policy evidence to support adoption.
8%
Total Score
25
50
50
Health Score Breakdown
Packagist marks the entire package as abandoned and provides no replacement. Package-level deprecation is a direct reason not to start a new dependency on this release.
The package has had no release in more than 11 years, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.
There were zero commits and zero active maintainers in the last three months, consistent with the repository being abandoned. This provides no current maintenance capacity to offset the age of the release.
The linked repository is archived and was last pushed more than 11 years ago. Archived source means fixes and maintenance should not be expected.
The repository is associated with an organization-owned namespace, but its owner login is an archive account. This does not provide meaningful current backing against the observed abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kevin Herrera |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ~1.0 | — | — |
kherge/file Version ~1.3 | — | — |
herrera-io/object-storage Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.