gamboa.martin/proceso
Tests are present and the release is stable, while the large runtime dependency set and absent security policy add upkeep and transparency concerns. The package is not deprecated or archived, but its small ownership base limits resilience.
55%
Total Score
50
50
88
67
Health Score Breakdown
The package declares 35 runtime dependencies, including many PHP extensions and several related packages, creating substantial compatibility and upkeep burden.
Only one registry publishing account is listed. That is consistent with a user-owned project but leaves limited publishing redundancy.
The repository is owned by an individual account rather than an organization, so there is no observed organizational backing to compensate for the thin maintainer base.
The package has 60 releases over nearly four years, but none in the last 12 months; the otherwise regular historical cadence does not offset the current pause.
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has stopped or substantially slowed.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Gamboa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpunit/phpunit Version ^10.0.0 | — | — |
gamboa.martin/acl Version ^24.0.0 | — | — |
tomsgu/pdf-merger Version ^0.5.0 | — | — |
gamboa.martin/test Version ^5.0.0 | — | — |
spatie/dropbox-api Version ^1.19 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.