Package Health

indieweb/link-rel-parser

Clear documentation, licensing, tests, and a minimal runtime dependency make integration straightforward. Maintenance evidence is stale, with no releases for about nine years and no recent commits; the repository/package naming mismatch also reduces transparency.

Latest 0.1.3PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

Only four releases have been published since October 2013, with no release in about nine years and no releases in the last 12 months. The long release gap is substantial abandonment evidence, even though the package is not marked deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. This corroborates the very old registry release rather than showing active maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while three issues and one pull request remain open. This indicates little current project activity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether it is the intended source repository. The mismatch is more concerning because the README also refers to a different project name.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported. The missing scanning is a hygiene gap, not a standalone dependency decision blocker.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aaron Parecki
Tantek Çelik

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform