hahadu/reflector
The package is small and has a clear README with no install-time scripts. Confirm the intended license before adoption, since the manifest and bundled license disagree.
65%
Total Score
50
100
81
83
Health Score Breakdown
The manifest declares MIT, while the bundled LICENSE is detected as Apache-2.0; the package is licensed, but the mismatch needs clarification before adoption.
Only one registry publishing maintainer is listed, and the project backing is an individual user rather than an organization, leaving a thin publishing and continuity base.
There were 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing development despite the recent repository push and release.
The repository has 0 stars and 0 forks, with 1 watcher; this provides little supporting evidence of community review, though popularity alone is not decisive.
Composer is used as the build tool, but no security scanning tools are configured, leaving a modest repository hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hahadu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 erusev/parsedown Version ^1.7 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.