cyberlpkf/clicksign
It includes a clear MIT license, README, and changelog, with no install scripts or deprecation notice. The single maintainer and absent security policy add ongoing ownership risk.
45%
Total Score
25
100
71
75
Health Score Breakdown
The package has 25 releases since January 2024, but none in the last 12 months; the long recent pause is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the longer release pause and indicating stalled maintenance.
Only one registry account has publish access, leaving limited publishing redundancy; the linked repository being user-owned provides no organizational backing to offset that concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.
The repository has no security policy, so users lack a documented reporting and response process; this matters for an integration package handling service credentials.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Luis Fernando Kieça |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^8.0 | — | — |
michaelachrisco/readonly Version ^0.60.1 | — | — |
staudenmeir/eloquent-json-relations Version ^1.5.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.