carica/chip
Usable with caveats: this is a documented, licensed package with repository tests and no deprecation or archive flag. However, it has had only one release and no recorded commits for more than six years, so maintenance and compatibility risk are significant.
58%
Total Score
0
75
Health Score Breakdown
The package has only one release, 0 releases in the last 12 months, and its latest release was more than eight years ago. This is strong evidence of limited ongoing maintenance, despite the repository still being available.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the package's long release gap. The repository is not archived, but there is no recent activity to offset the abandonment concern.
The repository uses Composer for its build and dependency workflow, providing basic project tooling. No security scanning tools are present, which is a transparency and hygiene gap for an older project, but not by itself a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thomas Weinert |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 carica/io Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.