brunonatali/file
The package is small, clearly documented, and easy to build from a focused dependency set. Its mature inactivity and lack of tests or security tooling make future fixes and compatibility work uncertain.
43%
Total Score
25
100
71
75
Health Score Breakdown
The latest release was in March 2021, and there have been no releases in the last five years. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
One registry maintainer is consistent with a small personal project, but it leaves little observable maintainer redundancy if the project needs fixes.
Composer is used for builds, but the repository has no security scanning tools. This is a hygiene gap that adds some uncertainty, though it does not outweigh the maintenance evidence by itself.
The repository has no security policy, reducing transparency about how vulnerabilities would be reported and handled. This matters more because there is no recent activity showing an alternative response process.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bruno Natali |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.