Package Health

gamboa.martin/where

A clear license, tests, and a matching source repository improve transparency. The dependency set is relatively broad for a small SQL helper; pin this version and reassess before upgrading.

Latest v3.5.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

Seven runtime dependencies create a relatively broad dependency surface for a small SQL helper, including testing and documentation-related packages. This adds maintenance and transitive-dependency exposure.

Release historycaution

The package has made no releases in the last 12 months, and its latest release was about 18 months ago. Its history of 54 releases shows prior activity but does not offset the current pause.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months, consistent with the long release pause and indicating limited current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance-process gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Martin Gamboa

Direct Dependencies

DependencyLast ReleaseScore
phpunit/phpunit
Version ^10.0.0
—
—
gamboa.martin/sql
Version ^v1.0.0
—
—
gamboa.martin/test
Version ^v5.0.0
—
—
phpdocumentor/shim
Version ^3.6
—
—
gamboa.martin/validacion
Version ^v5.0.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform