gemorroj/ginfo
The package is licensed, documented, tested, and has a matching repository. Its small maintainer base and limited recent activity reduce confidence, while CI image pinning and no security policy add hygiene concerns.
68%
Total Score
67
100
88
75
Health Score Breakdown
The package has been available since April 2018 with 19 releases, but only one release occurred in the last 12 months. This indicates established history with a slower current cadence.
All recent commits came from one contributor, giving the project a concentrated bus factor. Its individual ownership context provides no organizational handoff evidence.
There was one commit in the last three months from one active maintainer. Recent activity is present, but the volume is limited and does not show broad maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap, not proof of unsafe code.
The repository has no security policy. This weakens vulnerability-reporting transparency for a library that reads system and service information.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gemorroj |
| Joe Gillotti |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ^7.4||^8.0 | — | — |
symfony/http-client Version ^7.4||^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.