Package Health

ernestdefoe/giveaways

Healthy and actively developed, with a clear repository and frequent releases. The main caveats are its very young history, lack of tests and changelog, and limited security-process evidence.

Latest v0.2.3PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health checks

Maintainerscaution

One registry publishing account is a modest bus-factor concern, although the linked repository shows two active contributors and the owner is also the repository owner.

Package scaffoldingcaution

A substantial README and GitHub Releases are present, but neither the package nor repository includes tests or a changelog. For an extension with database, scheduler, and user-facing behavior, the absence of tests is a real maintenance gap.

Project backingcaution

The registry namespace and repository are owned by the same individual, providing consistent ownership, but there is no organization backing to broaden institutional maintenance capacity.

Repo issue activitycaution

There is one open issue and no issues or pull requests were opened or closed in the last month, providing limited evidence about community support and issue-handling responsiveness.

Repo popularitycaution

The repository has only 1 star and no forks or watchers, so there is little external adoption evidence. This is supporting evidence rather than a decisive health problem for a young package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ernestdefoe

Direct Dependencies

DependencyLast ReleaseScore
flarum/core
Version ^2.0

Weekly Downloads

Info

Last Published
4 days ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform