codicastudio/dependency-manager
The repository includes tests, a clear MIT license, and no install-time scripts. Its limited maintainer base and missing security policy provide little support for continued care.
38%
Total Score
50
78
75
Health Score Breakdown
This is the package's only release, published about six years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
Only one registry account has publishing access. Because the repository is user-owned rather than organization-backed, this represents a thin publishing base, though access records do not prove who actively maintains the code.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of community adoption or review.
Composer is used for the build, but no security scanning tools are reported. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The linked repository has no security policy. That weakens vulnerability-reporting transparency, especially for a package that runs inside a consumer's application.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michael J Brown |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^8.0 | — | — |
mcstreetguy/composer-parser Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.