devkind/writesonic-php
The project has no security scanning, and both GitHub Actions dependencies are unpinned. Its small registry maintainer base is partly offset by organization backing, tests, documentation, and a clear license.
45%
Total Score
50
100
75
67
Health Score Breakdown
Only two releases were published, both within about six days in November 2022, with no release in nearly four years. This is strong evidence of an abandoned release line.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving maintenance capacity unproven.
The package has one registry publishing account, which is a thin operational base; organization ownership provides some compensation for continuity risk.
Composer build tooling is present, but no security scanning tools were detected. That reduces transparency around dependency and build risks.
The repository is not archived, which is a compensating signal, but its last push was on November 12, 2022 and does not offset the absence of recent activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Devkind Developer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^1.26.3 || ^2.0 | — | — |
guzzlehttp/psr7 Version ^2.4.1 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
guzzlehttp/promises Version ^1.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.