ecxod/prepend
The package is tiny and clearly identified, with a README and release notes for this version. Its four runtime dependencies and lack of security scanning add maintenance overhead for a small utility.
55%
Total Score
50
50
79
75
Health Score Breakdown
The manifest declares MIT, but the artifact and repository license file were detected as AGPL-3.0. This unresolved mismatch creates a meaningful adoption and compliance concern.
This small prepend utility declares four runtime dependencies, including Sentry, Twig, and dotenv. That is a relatively broad dependency surface for the package's stated purpose and increases maintenance exposure.
The latest release was published over a year ago, and there were no releases in the last 12 months. The package has only four releases overall, indicating limited ongoing maintenance evidence.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, which is a modest compensating signal but does not show active maintenance.
The linked repository has no security policy. This is a transparency gap, though the package is small and no security issue is established by this signal alone.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christian Eichert |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.10 | — | — |
sentry/sdk Version ^4.0 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.