Package Health

cpsit/setup-helper

The package includes tests, a changelog, a clear README, and organization-backed source with security scanning. Its maintenance appears dormant, so future compatibility and issue response are uncertain; installation also runs a Composer lifecycle script that can change project files.

Latest 2.0.0PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Lifecycle scriptscaution

The package runs a post-autoload-dump Composer script, which is expected for a Composer plugin but can alter the consuming project during installation or updates.

Release historycaution

The latest release was in June 2021, with no releases in the last 12 months; this is a meaningful abandonment and compatibility concern despite 14 historical releases.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months, reinforcing that maintenance is currently dormant.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a modest transparency gap for a package that runs project setup actions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dirk Wenzel

Direct Dependencies

DependencyLast ReleaseScore
naucon/file
Version ^1.0
—
—
webmozart/glob
Version ^4.3
—
—
symfony/filesystem
Version ^5.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform