friendsofvictoire/button-widget
The source has had no commits for roughly nine years, and its README directs users to another package. The repository also lacks a security policy and does not identify this package by name, reinforcing the maintenance and ownership concerns.
12%
Total Score
0
25
50
Health Score Breakdown
Packagist marks the entire package as abandoned and names victoire/button-widget as its replacement, making this release unsuitable for a new dependency.
The latest release was published in April 2017, with no releases in the last 12 months; this is roughly nine years without registry updates.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's stated abandonment.
A README is present, but it explicitly says the bundle is no longer maintained and directs consumers elsewhere. The absence of tests and a changelog is normal for a published package and is not treated as a gap.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent. Organization ownership and the matching repository file tree provide some context but do not remove the concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leny Bernard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 victoire/victoire Version ~2.3|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.