goldfinch/helpers

Its MIT licensing and matching source repository make ownership and reuse clear. No tests, security scanning, or security policy leave limited evidence for ongoing maintenance, despite a stable release history and an unarchived repository.

Latest v2.0.18

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, but it has zero characters, and neither the package nor repository contains tests or a changelog. Missing tests and changelog are normal packaging practice, while the empty README weakens consumer transparency.

Release history

The package has 35 releases, but none in the last 12 months; its latest release was in June 2025. This suggests maintenance has slowed substantially.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. The repository was pushed at the latest release, but there is no recent development activity beyond that.

Repo tooling

Composer is used as the build tool, which is appropriate for this package, but no security scanning tools are configured. That leaves less evidence of ongoing dependency and code-quality oversight.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Art Karasev

Direct Dependencies

Dependency	Last Release	Score
goldfinch/taz Version ^2.0	—	—
silverstripe/admin Version ^2.0	—	—
swisnl/textsnippet Version ^3.0	—	—
silverstripe/framework Version ^5.0	—	—
symbiote/silverstripe-gridfieldextensions Version ^4	—	—