goldfinch/service

There are no repository tests, security scanning tools, or security policy, which limits confidence in ongoing quality. The MIT license, stable release status, and matching unarchived repository provide useful baseline transparency.

Latest v2.0.5

Packagist

56%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. The repository owner is a user rather than an organization, so there is no provided organizational backing to compensate for this thin publisher base.

Package scaffolding

The artifact includes a README entry, but it has zero recorded characters, and neither the package nor repository has tests or a changelog. Missing tests and a changelog are normal packaging practice, but the empty README weakens consumer transparency.

Release history

The package has 12 releases overall, but none in the last 12 months; its latest release was about 20 months ago. This is meaningful evidence of slowing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, supporting the release-history concern about current maintenance.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tooling is present. This is a modest quality and maintenance gap rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Art Karasev

Direct Dependencies

Dependency	Last Release	Score
goldfinch/date Version ^1.0	—	—
google/recaptcha Version ^1.3	—	—
goldfinch/helpers Version ^2.0	—	—
sendgrid/sendgrid Version ^8.0	—	—
mailchimp/marketing Version ^3.0	—	—