erickskrauch/prometheus
The package includes tests, a changelog, release notes, and a clear MIT license. Its small dependency surface and recently updated repository are positives, though the missing security policy and unpinned workflow actions reduce confidence.
70%
Total Score
67
100
79
83
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
Only two releases exist across about 288 days, with a median interval of roughly 227 days. This is limited evidence of sustained release activity for a young package.
All four recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk for this user-owned project.
Composer build tooling is present, but no security-scanning tooling was detected. The lack of scanning is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, so vulnerability reporting and response expectations are not documented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ErickSkrauch |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.