erikwang2013/global-logistics
Clear documentation, tests, licensing, and recent publishing support adoption. Unpinned workflow actions and the lack of a security policy leave modest transparency and build-hygiene concerns.
65%
Total Score
67
100
88
75
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so there is no shown organizational handoff capacity to offset the concentrated contributor base.
The package has seven releases over 27 days, including a release within the assessment period, showing active early development. The very short history means long-term maintenance is not yet established.
All 70 recent commits came from one contributor, so maintenance continuity depends heavily on a single person and carries a meaningful abandonment risk.
Composer is used for builds, but no security scanning tooling is reported. This is a modest project-hygiene gap rather than evidence of an unsafe release.
The repository has no published security policy, leaving vulnerability-reporting expectations and response procedures unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Erik Wang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.1|^2.0 | — | — |
guzzlehttp/guzzle Version ^7.7|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.