Package Health

choval/base_convert

The package includes tests, a clear README, an MIT license, and no runtime dependencies. Its maintenance record is effectively dormant, so future fixes and compatibility updates are uncertain.

Latest v0.1.1PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has had only two releases, with the latest release on August 15, 2019 and none in the last 12 months. This is strong evidence of abandonment for a dependency that may need future fixes.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, after roughly seven years without a repository update. This materially raises the risk that defects or compatibility changes will go unaddressed.

Repo toolingcaution

Composer is used for build and dependency tooling, but no security scanning tool is configured. This is a modest transparency gap, though it does not outweigh the clearer maintenance evidence.

Repository archivedcaution

The repository is not archived, which avoids the strongest abandonment signal, but its last push was on August 15, 2019. That old repository state is consistent with the inactive release history.

Security policycaution

The repository has no published security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a transparency concern for a package intended for dependency use.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Osvaldo Jiang

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform