gong023/ayaml
The package includes a usable README, repository tests, a declared MIT license, and no install-time scripts. It lacks a security policy, and its source repository shows no recent commits, so future fixes and maintenance are uncertain.
60%
Total Score
33
88
83
Health Score Breakdown
The repository had zero commits and zero active maintainers in the last three months. Combined with the long gap since the latest release, this raises abandonment risk.
The package and repository are owned by the same individual account, so the source ownership is consistent. Individual ownership also means the project has a limited visible organizational backing signal.
The latest release was published on August 23, 2023, with no releases in the previous 12 months. That is a meaningful maintenance concern for a package last updated over three years ago.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a quiet project, but it does not demonstrate active maintenance.
Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sho ogihara |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^5.3.6 | — | — |
gong023/retry Version ^0.2.1 | — | — |
nesbot/carbon Version ^2.57 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.