Package Health

drealecs/time-benchmark

It is a focused package with tests, a stable version, and only one runtime dependency. The absent security policy and fully unpinned workflow actions add maintenance and build-integrity concerns.

Latest v1.1.1PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the nearly three-year gap since the last push and release. This is the strongest evidence of possible abandonment.

Release historycaution

The package has only three releases since 2015 and none in nearly three years, indicating a very slow release cadence. Its long history partly offsets this because the latest release is stable rather than prerelease.

Repo popularitycaution

The repository has zero stars and forks and only two watchers, providing little evidence of an active user or contributor community. Popularity is supporting evidence, so this reinforces but does not determine the maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a maintenance and transparency gap, though it is not evidence of malicious behavior.

Workflow auditcaution

The sole workflow was fully analyzed with no reported audit findings, but all three action references are unpinned. That leaves the build exposed to upstream action changes and is a modest supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexandru Patranescu

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform