Package Health

filehutch/filehutch-php

Clear MIT licensing, thorough documentation, tests, and a matching organization repository improve transparency. Its single release and no commits or contributors recorded over three months leave maintenance capacity unproven.

Latest v0.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

This is the package's first and only release, published today, so there is no release history or cadence demonstrating sustained maintenance yet.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. Because the package was released today, this may reflect its newness, but it still provides no evidence of an established maintenance track record.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest supply-chain hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations undocumented. This lowers transparency but is not severe enough to make the release unfit on its own.

Version stabilitycaution

Version v0.1.0 is an early non-stable major release, which indicates the API may still change substantially even though it is not marked as a prerelease.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/http-client
Version ^1.0
—
—
psr/http-factory
Version ^1.0
—
—
psr/http-message
Version ^1.1 || ^2.0
—
—
php-http/discovery
Version ^1.19
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform