cebpereira/php-cep
The package is small and transparent, with a matching repository, a declared MIT license, and repository tests. Its simple dependency profile limits exposure, but adopting an unmaintained educational package carries clear longevity risk.
45%
Total Score
25
100
67
83
Health Score Breakdown
The package has only two releases, both published in December 2022, and none in the past 12 months. This indicates a long-standing lack of release maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's extended inactivity.
One registry maintainer is a thin publishing base for a user-owned project, increasing continuity risk if that person stops maintaining it.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap, not a severe risk by itself.
The linked repository is not archived, although its last push was in December 2022; the inactive but available repository provides limited compensation for the maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carlos Elandro |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.