Package Health

drago-ex/gravatar

Clear documentation, tests, and release notes make integration straightforward. Organization backing and security tooling help offset the small recent contributor base, but workflow pinning and policy coverage remain limited.

Latest v2.0.1PackagistPackagist

74%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo bus factorcaution

All one recent commit came from a single contributor, leaving no demonstrated second active contributor. Organization ownership provides some handoff capacity but does not remove the observed concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, so recent development activity is thin. The current release and recent push provide some compensation, but not enough to remove the maintenance caveat.

Security policycaution

No repository security policy was found. For a small library this is a transparency gap, though the presence of GitGuardian scanning partially offsets the concern.

Workflow auditcaution

All three workflows were analyzed without failed files, dangerous triggers, injection findings, or excessive top-level permissions. However, all 9 action references are unpinned, which is a workflow supply-chain hygiene weakness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Zdeněk Papučík

Direct Dependencies

DependencyLast ReleaseScore
nette/di
Version ^3.2
nette/utils
Version ^4.0
nette/application
Version ^3.2

Weekly Downloads

Info

Last Published
3 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform