Package Health

drdplus/theurgist-formula-calculator

The MIT license, focused dependencies, and organization-backed repository support a clear ownership story. Tests and a changelog are present, but there is no security policy; pin this version and verify compatibility before adopting.

Latest 1.0.28PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Lifecycle scriptscaution

A pre-autoload-dump install-time script is present. This adds some installation complexity and execution surface, but the signal does not indicate a dangerous script by itself.

Release historycaution

The package has 29 releases but none in the last 12 months, and version 1.0.28 was published about 6 years and 9 months ago. This long release silence materially raises abandonment risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this is strong evidence that active maintenance has stopped.

Repo toolingcaution

Composer is used as a build tool, supporting reproducible ecosystem-standard packaging. No security scanning tools were detected, which is a modest transparency gap but not a severe risk on its own.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's tests, license, and non-archived repository provide some compensating project structure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
drdplus/tables
Version ^2.5
drdplus/calculator-skeleton
Version ^1.1

Weekly Downloads

Info

Last Published
6 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform