digitea/licensing
Usable with caveats: the package is licensed, tested, clearly documented, and backed by an organization, but it is only 3 days old with six rapid releases and no observed commit activity yet. The missing security policy and changelog also reduce transparency.
58%
Total Score
75
100
81
90
Health Score Breakdown
The artifact includes a README and tests, and the repository also has tests, which compensates for the absence of a changelog. Documentation and basic validation are present, but release transparency is somewhat limited.
The package is only 3 days old and has already made 6 releases, with a median interval of about 46 minutes. This suggests an immature release history that has not yet demonstrated sustained maintenance.
No commits and no active maintainers were observed in the last 3 months. The repository's recent push and the package's 3-day age provide context, but there is not yet evidence of sustained development activity.
Composer build tooling is present, but no security scanning tools were detected. For a newly published SDK, this leaves a modest tooling gap.
The linked repository has no security policy. This does not make the package unusable, but it reduces transparency about vulnerability reporting and response.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 16 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.