gourmet/validation
It has tests, a clear README, a matching MIT license, and no install-time scripts. Its small dependency set helps, but the long period without maintenance leaves compatibility and abandonment concerns.
42%
Total Score
50
100
81
83
Health Score Breakdown
The package has had only two releases, with the latest in April 2015 and none in roughly 11 years. That is strong evidence of abandonment risk for a framework integration, despite the stable version line.
There were no commits and no active maintainers in the three months measured, consistent with the repository last being pushed in March 2017. This materially increases abandonment and compatibility risk.
Composer build tooling is present, which fits the package ecosystem. No security-scanning tooling is reported, a minor transparency gap that matters less than the prolonged inactivity.
The repository has no security policy. For a small, old validation plugin this is a hygiene gap, but it is less significant than the maintenance evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jad Bitar |
| Others |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cakephp/cakephp Version ~3.0 | — | — |
respect/validation Version 0.8.* | — | — |
ronanguilloux/isocodes Version dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.