francisbesset/carew-assetic
The README gives concrete Composer installation and configuration guidance, and the package declares an MIT license. There are no tests, changelog, security policy, or security scanning tools, leaving limited evidence for ongoing quality and maintenance.
35%
Total Score
50
67
50
Health Score Breakdown
This package has only one release, v1.0.0, published in December 2013, with no releases in the last 12 months. That long gap is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no maintenance since its original release.
Composer is used as the build tool, but no security scanning tools are present. This is a minor transparency and maintenance gap rather than evidence of immediate unfitness.
The repository is not marked archived, which is a positive counter-signal, but its last push was on 3 December 2013 and does not offset the long period without activity.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that has been inactive for years.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Francis Besset |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 carew/carew Version ~2.0@dev | — | — |
kriswallsmith/assetic Version ~1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.