Package Health

ffi-headers/bass-mix-headers

Unfit to use: the package is deprecated and its source repository is archived, with no releases or commits for about four years. It has a license, tests in the repository, and a clear package match, but those positives do not offset the abandonment risk.

Latest 1.0.0PackagistPackagist

15%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

56

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the release.

Release historydanger

This is the only release, published in March 2022, with no releases in the last 12 months. The long period without a new release indicates the package is effectively dormant.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the archived status and lack of ongoing maintenance.

Repository archiveddanger

The linked repository is archived and was last pushed in August 2022, so it is no longer an active maintenance path. That leaves compatibility and defect fixes unlikely.

Maintainerscaution

Only one registry account has publish access. The organization-owned repository makes a short registry maintainer list understandable, but it still provides limited evidence of active publishing capacity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nesmeyanov Kirill

Direct Dependencies

DependencyLast ReleaseScore
ffi/preprocessor
Version ^0.2.1|^1.0
—
—
ffi-headers/contracts
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform