distilleries/security
The package includes tests, a matching MIT license, and organization-backed source with no deprecation or install-time scripts. Maintenance activity is quiet, and the repository has neither security scanning nor a published security policy, which matters for a security-focused dependency.
68%
Total Score
75
100
83
75
Health Score Breakdown
The package has 14 releases over roughly seven years and one release in the last 12 months, with a median interval of about 197 days. The recent v13.0.0 release is reassuring, but the overall cadence is modest.
The repository recorded zero commits and zero active maintainers in the three months before collection. The same-day release push provides some compensation, but ongoing maintenance capacity remains uncertain.
The repository has only 2 stars and 2 forks. This is weak supporting evidence, but popularity alone does not outweigh the active release and organization backing.
The repository uses Make and Composer, but no security-scanning tools were detected. For a package focused on sanitization, that is a meaningful hygiene gap.
The repository has no published security policy. This reduces transparency for reporting and handling vulnerabilities in a security-focused package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Maxime Francois |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ~5.7|~5.8|~6.0|~7.0|~8.0|~9.0|~10.0|~11.0|~12.0|^13.0 | — | — |
ezyang/htmlpurifier Version ^4.8 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.