Package Health

devaloka/devaloka-network

The package includes a README, changelog, and release notes, with a repository that matches the package under organizational ownership. Its mixed licensing metadata should be checked for compatibility before adoption.

Latest 0.1.2PackagistPackagist

32%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has only 3 releases, all from December 2015, with no releases in over 10 years. This is strong evidence that maintenance has stopped.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap in registry releases and indicating substantial abandonment risk.

Licensecaution

The package declares MIT, GPL-2.0, and GPL-3.0 while repository detection identifies GPL-2.0, creating licensing ambiguity that should be resolved before use.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a secondary transparency gap beside the much more serious maintenance concern.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Whizark

Direct Dependencies

DependencyLast ReleaseScore
devaloka/devaloka
Version ~0.5.0
—
—
devaloka/devaloka-plugin
Version ~0.6.0
—
—
devaloka/mu-plugin-installer
Version ~0.1.0
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform