drewlabs/core-helpers
This release appears usable and actively maintained: it has 15 releases over roughly 3 years, six releases in the last 12 months, a recent repository push, no deprecation status, and an organization-owned repository with repository tests and changelog evidence. The main concerns are concentrated maintenance, with all four recent commits from one contributor, very limited repository adoption, no security policy, and a repository that neither matches the package name exactly nor mentions the package in its README. The package is therefore reasonably healthy but warrants extra verification of repository ownership and release provenance before becoming a critical dependency.
72%
Total Score
63
50
83
90
Health Score Breakdown
Six runtime dependencies, including PHP extensions and established PSR/UUID-related components, create a moderate dependency surface. This is not excessive for a utility package but adds compatibility and transitive-maintenance considerations.
One contributor made all 4 commits in the last 3 months, creating a single-person operational dependency. Organization ownership offers some potential handoff capacity, but no second active contributor is evidenced.
The repository recorded 4 commits in the last 3 months, showing recent activity, but all activity is concentrated in one active maintainer. The activity is positive but thin.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a small, quiet project, but it provides little evidence of a broader maintenance community.
The repository name does not match the package name and its README does not mention the package. This creates a concrete provenance concern that the package may not be clearly tied to the linked repository, even though a name mismatch alone can occur for subpackages or related repositories.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 azandrew-sidoine |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.1 | — | — |
tuupola/base62 Version ^2.1 | — | — |
psr/http-factory Version ^1.0|^2.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.