Package Health

goldfinch/component-blog

The MIT license and matching package repository provide useful transparency. It has no security scanning, tests, or security policy, and its runtime dependency set is sizable.

Latest v2.0.7PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

38

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has 35 releases, but its latest release was over two years ago and there were no releases in the last 12 months. The earlier release cadence does not compensate for the prolonged pause.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release pause and indicating a serious abandonment risk.

Dependency profilecaution

The package declares 15 runtime dependencies and no development dependencies. This is a substantial integration surface and provides little evidence of a maintained test setup, though the dependencies are relevant to its framework component.

Maintainerscaution

Only one account has registry publish access. The matching repository owner provides some continuity, but ownership is an individual user rather than an organization, leaving a thin publishing and maintenance base.

Package scaffoldingcaution

The artifact includes a README, but it is empty and neither the package nor repository reports tests or a changelog. Missing tests and changelog are normal packaging practice, while the empty consumer documentation is a minor transparency gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Art Karasev

Direct Dependencies

DependencyLast ReleaseScore
goldfinch/taz
Version ^2.0
—
—
goldfinch/date
Version ^1.0
—
—
goldfinch/mill
Version ^2.0
—
—
goldfinch/nest
Version ^1.0
—
—
goldfinch/fielder
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform