Package Health

codeq/prototyperenderernode

This is a small, clearly scoped Neos CMS package with an MIT license, a linked organization-owned repository, stable versioning, no registry deprecation, and a recent release. However, its maintenance history is sparse: only four releases over roughly five years, one release in the last year, and no active maintainers or commits in the last three months. The repository also lacks tests, security scanning, and a security policy, although the package is small and has a simple Composer-based structure with no install-time scripts or dangerous workflows. It appears usable, but adopters should verify compatibility and be prepared for limited ongoing maintenance.

Latest v1.2.0PackagistPackagist

69%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Dependency profilecaution

There are three runtime dependencies and no development dependencies. The runtime dependency set is modest, but the absence of dev dependencies is consistent with the lack of repository tests and limits visible validation coverage.

Maintainerscaution

Only one registry account has publish access, which is a modest publishing-continuity risk. This is partly mitigated by the linked repository being owned by an organization.

Package scaffoldingcaution

A README and GitHub Releases are present, but neither the artifact nor repository contains tests or a changelog. The missing tests are a genuine maintenance-confidence gap, while the missing changelog is less significant because release support is present.

Release historycaution

The package has existed for about 1,900 days and has four releases, but the median release interval is about 569 days and only one release occurred in the last 12 months. This indicates slow, intermittent maintenance rather than strong release momentum.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Although the repository was recently pushed and had one merged pull request, the measured commit inactivity is a meaningful concern about current maintenance capacity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Roland Schütz

Direct Dependencies

DependencyLast ReleaseScore
neos/neos
Version ~3.2 || ~4.0 || ~5.0 || ~7.0 || ~8.0 || dev-master
—
—
neos/fusion-afx
Version ^1.0 || ~7.0 || ~8.0 || dev-master
—
—
flowpack/nodetemplates
Version ~1.0 || ~2.0 || dev-master
—
—

Weekly Downloads

Info

Last Published
26 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform