harugon/chartjs
The README, release notes, Composer setup, and recent repository push provide useful transparency. Ongoing maintenance is concentrated in one contributor, while workflow dependencies are unpinned and one action is archived.
64%
Total Score
50
100
94
50
Health Score Breakdown
The repository is owned by an individual rather than an organization, so there is no provided organizational backing to compensate for the concentrated contributor base.
The package is over six years old but has only four releases, with one release in the last 12 months. The recent release and repository activity partly offset the sparse overall cadence.
All four recent commits came from one contributor, giving the project a fragile maintenance base if that contributor becomes unavailable.
Four commits were made in the last three months, showing current activity, but the activity is limited in volume and comes from only one active maintainer.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package integrated into MediaWiki installations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 harugon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ^1.0.1 | — | — |
param-processor/param-processor Version ~1.10 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.