Package Health

coquibot/coqui-toolkit-clawhub-skills

Tests and a README make the package easier to adopt. Its release workflow uses broad permissions and unpinned actions, adding avoidable supply-chain exposure.

Latest v0.1.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historycaution

This is the only release in 187 days, so there is little release history to demonstrate sustained maintenance or maturity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, leaving ongoing maintenance capacity unproven for a package only 187 days old.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so users have no documented reporting path for vulnerabilities or security concerns.

Version stabilitycaution

The v0.1.0 version is not a stable major release, which signals an early-stage interface and possible compatibility changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Carmelo Santana

Direct Dependencies

DependencyLast ReleaseScore
symfony/http-client
Version ^7.0
—
—

Weekly Downloads

Info

Last Published
6 months ago
Created
6 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform