Package Health

greenpeace/gpnl-database-interface

The repository has organization backing, tests, and a usable README, but no recent commits and an MIT file conflicts with the proprietary declaration. Its 0.0.x status and absent security policy add uncertainty.

Latest 0.0.2PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historydanger

Only two releases exist, and none were published in the last 12 months; the latest release is over six years old, which indicates substantial abandonment risk.

Licensecaution

The manifest declares the package proprietary while an MIT license file is present in the artifact. The mismatch creates uncertainty about the terms consumers may rely on.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.

Version stabilitycaution

Version 0.0.2 is an early, non-stable release, so compatibility and long-term support are less certain than for a stable major version.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Swagger and contributors
Oscar Keur

Direct Dependencies

DependencyLast ReleaseScore
vlucas/phpdotenv
Version ^4.1
guzzlehttp/guzzle
Version ^6.2

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform