Package Health

bushart/set-env-variables

The package has a valid MIT license, a matching repository, and a stable 1.2 release. Maintenance capacity is limited: there have been no releases or commits in over two years, the project has one maintainer, and it has no security scanning or policy.

Latest 1.2PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Maintainerscaution

One registry maintainer is a thin support base for a package without recent development activity. The linked repository is user-owned, so there is no organization backing shown to offset that concentration.

Release historycaution

The latest release was in November 2023, with no releases in the last 12 months and only three releases overall. This indicates an inactive release line, though the package may be intentionally stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with more than two years without a release. No provided maintenance signal compensates for this inactivity.

Repo popularitycaution

The repository has one star and no forks, providing little evidence of broad community adoption or an active user base. Low popularity is supporting evidence rather than a decisive health problem.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

busharthussain

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform