dg/pohoda-mcp
The package includes a substantial README, repository tests, and a source tree that matches the package. MIT licensing, recent commits, and no deprecation or install scripts are reassuring.
68%
Total Score
67
81
75
Health Score Breakdown
The repository is owned by a user rather than an organization, so there is no observed organizational backing to offset the concentrated maintainer base.
The package is only 105 days old with three releases, but releases arrived about every 23 days, showing early ongoing development rather than abandonment.
All five recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.
Composer build tooling is present, but no security-scanning tools were detected, leaving security review less automated.
The repository has no security policy, so vulnerability reporting and response expectations are not documented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Grudl |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mcp/sdk Version ^0.7.0 | — | — |
symfony/finder Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.