chrisjohnleah/velocity-fleet-api
Documentation, repository tests, and a clear MIT license make the package straightforward to evaluate. Its recent activity is absent, and all four workflow actions are unpinned.
62%
Total Score
50
100
79
75
Health Score Breakdown
The package and repository are owned by the same individual account. This is coherent ownership, though it indicates a single-person backing model rather than organizational support.
The package is only 104 days old with three releases, all published within a short initial burst. This provides some release evidence but not enough history to establish sustained maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. Because the package is young, this is not proof of abandonment, but it leaves maintenance continuity unproven.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap rather than a standalone dependency decision blocker.
Version v0.1.2 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which partly reduces the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Chris John Leah |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 saloonphp/saloon Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.