gemvc/aggregator
The package has only two runtime dependencies and no install-time scripts, limiting integration and installation complexity. Documentation is minimal, while the source project shows no recent work and its license evidence conflicts.
38%
Total Score
0
100
50
75
Health Score Breakdown
This is the package's only release, published about 2 years 9 months ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and increasing abandonment risk.
The manifest declares MIT, but the detected LICENSE file is Apache-2.0. Although a license is present, the mismatch creates avoidable legal ambiguity for adopters.
Composer is used for the build, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.
The linked repository has no security policy, reducing transparency about vulnerability reporting and maintenance response. No provided signal compensates for that gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ali Khorsandfard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 predis/predis Version ^2.2 | — | — |
firebase/php-jwt Version ^6.9 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.