coquibot/coqui-toolkit-packagist
Tests, a README, and four releases over about five weeks provide useful context. Do not adopt this package because Packagist marks it abandoned and its source repository is archived.
12%
Total Score
0
67
100
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning that the release should not be depended on for new work.
The repository had zero commits and zero active maintainers in the last three months. The archived status makes this lack of recent activity a strong abandonment signal.
The linked repository is archived, so it is no longer an active maintenance source. Its last push was on March 23, 2026, and the package is also marked abandoned.
All 10 analyzed action references are unpinned, and the release workflow has top-level write permissions; both are hygiene concerns. The only audit finding is low-confidence cache poisoning, so it does not independently establish a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carmelo Santana |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-client Version ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.