droath/plugin-manager
The package has clear documentation, tests, and a minimal runtime dependency. It lacks a security policy, and current maintenance evidence is limited despite the repository remaining active recently.
73%
Total Score
50
100
88
75
Health Score Breakdown
The registry namespace and repository owner match, providing consistent ownership evidence. The owner is an individual account, so there is no organization backing to offset the single-maintainer context.
The package has five releases over about 22 months, with one release in the last 12 months and a median interval of about 77 days. This indicates light but established release activity rather than abandonment.
There were no commits and no active maintainers in the three months measured. Although the repository was pushed recently, the short-term activity gap lowers confidence in ongoing maintenance.
The repository uses Composer for builds, but no security scanning tool was detected. The missing scanner is a modest process gap, not evidence that the package is unsafe.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Travis Tomka |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 kcs/class-finder Version ^0.5.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.