ecs/alwaysvat
A clear README, explicit GPL license, and no install-time scripts make the package straightforward to inspect and install. However, its only release was over eight years ago, with no recent commits, tests, or security tooling, making abandonment a serious concern.
42%
Total Score
0
67
50
Health Score Breakdown
The package has only one release, published over eight years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency.
The repository has recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap and indicating little ongoing maintenance capacity.
Composer is used for the build, which is appropriate, but no security scanning tools are present. For a small package this is a hygiene gap rather than a severe risk.
The linked repository is not archived, which is a modest positive; however, its last push was over eight years ago, so the unarchived status does not offset the maintenance concern.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The package's small scope limits the impact, but this still reduces transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.