Package Health

govcore/govcore_media

The source tree is substantial, licensed, and tested, with organization backing and no install-time scripts. Pin an actively maintained alternative or accept ownership of updates because this release has seen no maintenance for over three years.

Latest 5.0.0PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The last release was on March 22, 2023, and there were no releases in the following 12 months; more than three years without a release is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, corroborating the long release gap and indicating no recent maintenance capacity.

Repo popularitycaution

The repository has zero stars and one fork, which offers little evidence of broad community support, but popularity is supporting evidence and does not outweigh the direct maintenance signals.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance-hygiene gap, not evidence of abandonment by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear; this matters more for a media-handling package with upload-related modules.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
govcore/govcore_core
Version ^6
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform