gilbitron/pico
Documentation, licensing, release notes, and a security policy make the project transparent. Treat upgrades carefully because this is an alpha release.
58%
Total Score
50
100
79
100
Health Score Breakdown
The repository is owned by the picocms user account rather than an organization, so the concentrated recent maintenance activity is not compensated by visible organization backing.
The package has 36 releases over more than 11 years, but none in the last 12 months and its latest registry release was over five years ago, indicating weak release continuity.
All recent commit activity came from one contributor, leaving maintenance dependent on a single active person.
Only one commit was recorded in the last three months, showing very limited recent development activity.
There were no new or closed issues or pull requests in the last month, which is consistent with a currently quiet maintenance cycle.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gilbert Pellegrom |
| Daniel Rudolf |
| The Pico Community |
| Contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2.12 | — | — |
symfony/yaml Version ^3.4 | — | — |
erusev/parsedown Version 1.7.4 | — | — |
erusev/parsedown-extra Version 0.8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.