Package Health

geniussystems-np/cloudevents

Its three-file tree and single registry maintainer offer little evidence of ongoing development. MIT licensing, an unarchived repository, and organization ownership provide some reassurance, but not enough for a dependable new dependency.

Latest 1.0.1PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has only two releases, and the latest was published in January 2021; there have been no releases in more than five years. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed ongoing maintenance.

Package file treecaution

The published artifact contains only three files, including one source file. That may fit a very small library, but it provides little evidence of mature project structure.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a maintenance and transparency gap, though not severe by itself.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

jerry

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform