cold/weather
The package includes clear usage documentation, and its source tree contains tests. However, it has no security scanning, only one registry maintainer, and no repository commits for about eight years.
42%
Total Score
25
50
79
100
Health Score Breakdown
This is the package's only release, published about eight years ago, with no releases in the last 12 months. That strongly limits evidence of maintained compatibility.
The repository has had zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for about eight years.
The package declares three runtime dependencies, including PHPUnit and Mockery, which appear more typical of development dependencies and increase the installed dependency surface.
A single registry maintainer provides little publishing redundancy, although the linked repository is owned by an individual rather than an organization, so the small list is not offset by organizational backing.
Composer build tooling is present, but no security scanning tools are configured. This is a transparency and maintenance gap, not evidence that the release is malicious.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 cold |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mockery/mockery Version ^1.1 | — | — |
phpunit/phpunit Version ^7.3 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.