Package Health

ilbronza/prices

This release appears generally safe to depend on from a maintenance and transparency perspective: it is a stable, non-deprecated package with a matching linked repository, a recent push, five commits in the last three months, and two active contributors. The main concerns are a very small release history (only three releases over roughly 3 years and 11 months), a minimal 11-character README, no tests in either the artifact or repository, no security scanning or security policy, and a concentrated contributor profile. These gaps keep it in the healthy range but warrant additional review before adopting it for a critical dependency.

Latest v2.5.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Package scaffoldingcaution

A changelog and GitHub Releases provide some release transparency, but the README is only 11 characters and neither the artifact nor repository contains tests. For a framework-oriented package with substantial controllers and database migrations, the missing test coverage is a genuine maintenance concern.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the narrow maintainer base or contributor concentration.

Release historycaution

The package is mature by age but has only three releases over roughly 3 years and 11 months, with one release in the last 12 months and a median interval of about 681 days. The recent release shows continued activity, but the sparse cadence limits evidence of sustained release discipline.

Repo bus factorcaution

Two contributors were active in the last three months, but the leading contributor made 80% of commits. This creates some concentration risk, though the second contributor provides partial resilience.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral rather than clearly positive: it may reflect a quiet project, but it provides little evidence of community engagement.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Davide Bronzini

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
3 months ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform