carlos-mg89/phpflickr
The package includes tests, a substantial README, Composer tooling, and Dependabot coverage. Its license files conflict with the declared license, and the release line has seen no updates in over four years; pin this version only if that maintenance gap is acceptable.
58%
Total Score
50
100
86
75
Health Score Breakdown
The manifest declares GPL-3.0-or-later, while the artifact license file is detected as GPL-2.0; both the artifact and repository contain license files, but the mismatch requires clarification before adoption.
The package and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the thin maintenance history.
The latest release is over four years old, with no releases in the last 12 months and 28 releases overall. This is a meaningful maintenance concern, although the repository was pushed recently.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance even though the repository was pushed recently.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^3.0 | — | — |
carlos-mg89/oauth Version ^0.8.14 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.