Package Health

horde/ingo

The package includes tests, documentation, release notes, and no install-time scripts. Organizational ownership and two recent contributors provide useful continuity.

Latest v4.0.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Licensecaution

The artifact declares Apache-1.0 but its license file is detected as BSD-3-Clause. Although a license file is present, the mismatch creates a meaningful licensing and release-transparency concern.

Security policycaution

The repository has no documented security policy. This is a transparency gap for a server-integrated email filtering application, though it is not evidence of abandonment by itself.

Workflow auditcaution

Both workflows were analyzed without failed files, and no dangerous triggers, untrusted checkouts, or audit findings were reported. However, 6 of 7 action references are unpinned, leaving avoidable build reproducibility and supply-chain risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jan Schneider
Michael Slusarz
Chuck Hagenbuch

Direct Dependencies

DependencyLast ReleaseScore
horde/auth
Version ^3 || dev-FRAMEWORK_6_0
—
—
horde/core
Version ^3 || dev-FRAMEWORK_6_0
—
—
horde/form
Version ^3.1 || dev-FRAMEWORK_6_0
—
—
horde/mime
Version ^3 || dev-FRAMEWORK_6_0
—
—
horde/util
Version ^3 || dev-FRAMEWORK_6_0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform