Package Health

hexmakina/tight-orm

Usable with caveats: it has recent releases, an active source repository, and clear MIT licensing, but maintenance evidence is thin. No commits or issue resolution in the last three months, no tests, and a one-person project make long-term support uncertain.

Latest 0.1.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Dependency profilecaution

The package has four runtime dependencies, including three project-specific packages; this is not excessive, but it creates several linked maintenance surfaces for a small library.

Maintainerscaution

One registry publisher is consistent with a small user-owned project, but it leaves little apparent publishing redundancy or maintainer capacity.

Package scaffoldingcaution

A README is present, but the artifact and repository contain no tests or changelog. For an ORM library, the absence of visible tests is a meaningful maintenance and regression risk.

Project backingcaution

The registry namespace and repository owner match, and the owner is a user account rather than an organization. This supports ownership continuity but offers limited institutional backing.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although recent releases and a recent push provide some counterevidence, the current development activity is a notable support risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

HexMakina

Direct Dependencies

DependencyLast ReleaseScore
hexmakina/traitor
Version 0.2.0
—
—
hexmakina/crudites
Version 0.1.*
—
—
hexmakina/black-box
Version 0.1.*
—
—

Weekly Downloads

Info

Last Published
14 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform