Package Health

italystrap/theme-json-generator

The package includes tests, release notes, a clear MIT license, and an organization-backed repository. Registry publishing has been inactive since May 2024, while recent repository commits are absent; all workflow actions are unpinned and template-injection findings need review.

Latest 0.3.0PackagistPackagist

61%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Dependency profilecaution

The package declares 18 runtime dependencies, including several functional libraries, creating a relatively broad dependency surface for consumers.

Release historycaution

Only three releases exist, with none in the last 12 months and the latest published in May 2024. This is a meaningful maintenance concern, although the repository was still updated later.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The repository's later push date is some evidence of activity, but the observed commit window still points to a thin current maintenance signal.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Enea Overclokk

Direct Dependencies

DependencyLast ReleaseScore
spatie/color
Version ~1.5.0
scssphp/scssphp
Version ^1.12.1
webmozart/assert
Version ^1.11
brick/varexporter
Version ^0.3.8
composer/composer
Version ^2.1

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform