horaciolopesqq/dct
Its Docker-oriented contents and single runtime dependency keep the integration scope small. The repository could not be found, so maintenance and provenance remain unverified; this old release is a poor choice for a new dependency.
34%
Total Score
100
40
75
Health Score Breakdown
No declared license, license file, or detected license is present. This creates a material adoption and redistribution risk for an open-source dependency.
The package has had no release in nearly seven years, with zero releases in the last 12 months. That strongly suggests abandonment despite its earlier burst of releases.
The package runs pre-install, post-install, and post-update Composer scripts. Install-time execution increases dependency and review risk, especially when the source and maintenance history cannot be verified.
The artifact has no README, tests, or changelog, but it is published as a Docker Compose template, where tests and changelogs commonly remain in the source project. The missing README still makes consumption less clear.
Version 0.0.9 is not a stable major release, leaving the package with limited maturity evidence. Its non-prerelease status is mildly positive but does not offset the age and low version line.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.