humanmade/core
Unfit to adopt as a new dependency because Packagist marks this package abandoned and points to altis/core as its replacement. The source project is active and well-supported, but that does not remove the release-level migration risk.
20%
Total Score
100
88
67
Health Score Breakdown
Packagist marks the entire package abandoned and names altis/core as the replacement, making new adoption a significant maintenance and migration risk despite the release being current.
No repository security policy was found, leaving a transparency gap for reporting and handling security issues.
Three workflows omit top-level token permissions, and one backport workflow grants top-level write access; this is a workflow-governance gap, though no untrusted checkout or script injection was detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aws/aws-sdk-php Version ^3.393.5 | — | — |
composer/installers Version ^1.12 || ^2.3.0 | — | — |
segmentio/analytics-php Version ~3.8.2 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.