Package Health/brightnucleus/dependencies

brightnucleus/dependencies

Clear documentation, licensing, and a small runtime dependency set make integration straightforward. The source remains available and organization-backed, but the project lacks a published security policy and has limited recent development activity.

Latest v0.3.5

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry releases in the last six years, with its latest release on January 11, 2020. This is a meaningful freshness and maintenance concern, though the linked repository was pushed more recently.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the absence of registry releases for about six years, this indicates limited current development capacity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no published security policy. That reduces transparency for reporting and handling vulnerabilities, although it is not evidence of a vulnerability by itself.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, sinks, or audit findings. However, both action references are unpinned, leaving a modest supply-chain hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alain Schlesser

Direct Dependencies

Dependency	Last Release	Score
brightnucleus/config Version >=0.2	—	—
brightnucleus/invoker Version >=0.1	—	—
brightnucleus/contracts Version >=0.1	—	—
brightnucleus/exceptions Version >=0.2	—	—