dvsa/mot-cpms-shared-reports
The repository is active, includes tests and release notes, and clearly matches the package. License metadata needs clarification, while the small project and limited security coverage add operational caution.
68%
Total Score
67
100
81
83
Health Score Breakdown
The artifact contains an MIT license file, but the manifest declares the package as proprietary. The conflicting declarations should be resolved before adoption because they create legal-use ambiguity.
The package has five releases over about 3 years and only one release in the last 12 months, with a typical interval of about 176 days. This indicates modest rather than rapid maintenance, but the latest release is recent.
All recent commits came from one contributor. Organization backing partly offsets handoff risk, but no second recently active contributor is shown.
There was one commit by one active maintainer in the last 3 months. Recent activity is present, but the low volume limits evidence of sustained maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected. The build setup is established while automated security coverage is limited.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laminas/laminas-mvc Version ^3.1 | — | — |
dvsa/mot-cpms-client Version ^3.1.1 | — | — |
mtdowling/jmespath.php Version ^2.9.1 | — | — |
laminas/laminas-dependency-plugin Version ^2.6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.