Package Health

interactiv4/library-dev-tools

The README clearly explains the package's library-development role, and its tiny artifact fits a dependency metapackage. Releases have been quiet for about 17 months, all recent versions are pre-releases, and installation runs update scripts. The repository could not be found, limiting verification of maintenance and provenance.

Latest 8.3.0-p1PackagistPackagist

55%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

This development-tools metapackage declares 10 runtime dependencies, including testing, linting, and static-analysis tools. The contents fit its purpose, but the broad runtime dependency surface makes updates and transitive risk harder to manage.

Lifecycle scriptscaution

The package runs both post-install and post-update scripts. These may be appropriate for a development-tools metapackage, but they add install-time behavior that increases operational risk for consumers.

Release historycaution

The package has 10 releases over about six years but none in the last 12 months; this indicates limited recent maintenance, though the package may only need occasional updates.

Version stabilitycaution

The latest version is a pre-release and all recent versions are pre-releases, while the README explicitly says the package does not follow semver. That makes dependency upgrades less predictable.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Interactiv4

Direct Dependencies

DependencyLast ReleaseScore
phpmd/phpmd
Version ^2
phpro/grumphp
Version ^1
phpunit/phpunit
Version ^6 || ^7 || ^8 || ^9
nikic/php-parser
Version ^4
sebastian/phpcpd
Version ^3 || ^4 || ^5 || ^6

Weekly Downloads

Info

Last Published
1 year ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform