henderjon/chevron-containers
A BSD license, tests, release notes, and only two runtime dependencies make the package easy to inspect and integrate. Security documentation and automated scanning are absent, while the lone registry maintainer limits visible support capacity.
42%
Total Score
50
100
67
83
Health Score Breakdown
The package has had no registry release in about 10 years, despite 17 historical releases. That long pause is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the package's long release pause and indicating little current maintenance capacity.
The repository name does not match the package and its README does not mention the package, so the link between this artifact and its source is not clearly established.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence for continued community attention.
Composer build tooling is present, but no security-scanning tools were detected. For a maintained library this is a meaningful, though not decisive, transparency gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jon Henderson |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chevron/objectloader Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.