hanaboso/commons-bundle
The package includes tests, a clear license, and a long release history. Organization backing and repository alignment add useful transparency, while the lack of security policy and scanning leaves some maintenance gaps.
66%
Total Score
50
89
75
Health Score Breakdown
The repository had 0 commits and 0 active maintainers in the last three months. This is concerning because it contrasts with the recent registry release and weakens evidence of ongoing development.
There were no new or closed issues or pull requests in the last month, and no pull requests were open. Combined with zero recent commits, this provides little evidence of active project work.
The repository has 1 star, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it offers little external adoption signal.
The repository uses Make and Composer, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.
No repository security policy was found. This makes vulnerability reporting and response expectations less clear, though it is not by itself evidence of abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hanaboso/utils Version ^2.0 | — | — |
windwalker/crypt Version ^3.5 | — | — |
guzzlehttp/guzzle Version ^7.10 | — | — |
phpseclib/phpseclib Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.