drlenux/cpf
The MIT declaration and readable documentation provide basic transparency. Its broad dependency set and missing security policy add maintenance and oversight concerns for a small, inactive project.
15%
Total Score
50
50
58
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided; this is a severe adoption risk rather than a release-specific warning.
The package is about five years old, has five releases clustered on its first day, and has had no releases in the last 12 months, indicating prolonged inactivity.
The package declares 19 runtime dependencies, creating a wide maintenance surface for a project with no recent releases or visible ongoing activity.
The repository is owned by an individual account rather than an organization, so there is no shown organizational backing to compensate for the thin maintenance record.
The repository is not archived, which is a small positive, but its last push was about five years ago and does not offset the lack of release activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 drlenux |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version 3.x-dev | — | — |
spatie/url Version ^2.0 | — | — |
spatie/once Version ^3.0 | — | — |
spatie/async Version ^1.5 | — | — |
spatie/blink Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.