facebook/difflib
Documentation, licensing, and repository tests make the package easy to understand and verify. Its small runtime dependency set is helpful, but workflow references are unpinned and no security scanning or policy is present.
12%
Total Score
50
100
50
67
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. Package-wide deprecation is a severe adoption risk even though this release itself is stable.
The package has had no releases in the last 12 months, and its latest release was in September 2021. This strongly indicates prolonged release inactivity.
There were no commits and no active maintainers in the last three months. Together with the archived repository, this supports an abandonment concern rather than a merely quiet period.
The linked repository is archived, and it was last pushed in May 2022. An archived source project is a severe indicator that maintenance has ended.
Composer is used for builds, but no security scanning tools are configured. This is a transparency and maintenance gap, though it is secondary to the repository's inactive state.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hhvm/hsl Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.