geeklab/toolbox
The BSD license file conflicts with the GPL-3.0-or-later manifest declaration. A tested, small PHP utility library has a clear README and no install-time scripts, but repository security documentation is absent.
58%
Total Score
67
100
78
83
Health Score Breakdown
The manifest declares GPL-3.0-or-later, while the included LICENSE.BSD and repository license are BSD-2-Clause. This unresolved mismatch creates a real legal and transparency concern.
The repository is owned by an individual account rather than an organization, so the small two-account registry maintainer list offers limited evidence of project backing.
The package has had no release in nearly four years, with zero releases in the last 12 months. This materially raises abandonment and stale-dependency risk despite its seven-release history.
There were zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this weakens evidence of active maintenance.
The repository has one star and no forks, indicating limited external adoption. Popularity is supporting evidence only, so this modestly reduces maturity confidence but is not decisive.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 EllisGL |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.