Package Health

compwright/domo-uploader-php

It has one registry maintainer, no tests, no security scanning, and unpinned workflow actions. The MIT license, matching repository, release notes, stable version, and no install scripts provide useful transparency.

Latest v1.0.0PackagistPackagist

56%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Maintainerscaution

One registry account has publish access, so release continuity depends on a single person. The linked repository is user-owned rather than organization-backed, providing no visible maintainer-base compensation.

Release historycaution

This is the package's only release, published about 18 months ago, with no releases in the last 12 months. That leaves maintenance continuity unproven for a relatively new package.

Repo commit activitycaution

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no follow-up work since its initial release.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a hygiene gap for a library intended for application integration.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jonathon Hill

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^2.0 || ^3.0
—
—
compwright/easy-api
Version ^1.1
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform