getpop/migrate-component-model
Its last release was over five years ago, with only nine releases overall. The single registry maintainer and unavailable repository visibility make ongoing maintenance and provenance difficult to verify.
12%
Total Score
33
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe warning against taking a new dependency on it.
The latest release was over five years ago, and there have been no releases in the last 12 months. This strongly indicates abandonment risk, despite the package having nine releases overall.
The package remains on the 0.x line rather than a stable major version, which adds maturity and compatibility uncertainty. No prerelease activity partly offsets concerns about release quality, but not the lack of recent maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leonardo Losoviz |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.