bravo3/bakery
It includes a README, tests, an MIT license, and a repository that clearly matches the package. Its install scripts can run package-defined actions, while the project has had no visible maintenance for about 11 years and lacks security-policy coverage.
35%
Total Score
50
67
50
Health Score Breakdown
The last release was in November 2014, with no releases in the following 12 months of observed history; this is strong abandonment evidence for a package intended to manage remote hosts.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being about 11 years ago.
Post-install and post-update scripts execute package-defined behavior during dependency operations. That is relevant for a remote-host automation library and increases adoption risk when maintenance is so stale.
Composer is used for the build, but no security-scanning tools are present. This is a transparency and maintenance gap, though it is less significant than the long inactivity.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a package that handles remote credentials and host operations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jordon Scott |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 bravo3/ssh Version ~1.5.1 | — | — |
bravo3/standards Version ~1.0 | — | — |
bravo3/network-proxy Version ~1.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.