Package Health

conductor/core

The project includes tests, a changelog, and a matching Apache-2.0 license. Its small audience and lack of a security policy limit transparency, while the single recent contributor leaves maintenance capacity concentrated.

Latest 6.6.3PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo bus factorcaution

One contributor made all 19 commits in the last 3 months, giving a 100% top-contributor share. Organization backing provides some handoff capacity, but no second active contributor is shown, so maintenance remains concentrated.

Repo popularitycaution

The repository has 5 stars, 0 forks, and 6 watchers. Low popularity is supporting caution about external validation, but it does not outweigh the active release and commit history.

Repo toolingcaution

The repository uses Composer for builds, but no security-scanning tools are reported. The missing scanning is a transparency and hygiene gap, not evidence of unsafe code by itself.

Security policycaution

No repository security policy is present. For a package providing encryption, shell, filesystem, and database functionality, the absence reduces the clarity of vulnerability reporting and maintenance practices.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kirk Madera

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version ^8.0
—
—
monolog/monolog
Version ^3.3.1
—
—
symfony/console
Version ^8.0
—
—
league/flysystem
Version ^3.12.3
—
—
revolt/event-loop
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
4 hours ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform