Package Health

itcig/sage-timber

The repository is MIT-licensed, has a substantial README and release notes, and is backed by an organization. Dependencies and the Composer install hook add normal integration considerations, but no deprecation or archive marker is present.

Latest v9.1.0PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has 23 releases but none in roughly six years; its latest registry release was March 2020, which is a substantial maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months, reinforcing the long release gap and raising abandonment risk.

Repo issue activitycaution

Eight pull requests remain open, while no issues or pull requests were opened or merged in the past month, suggesting unresolved work and limited current activity.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap for a maintained dependency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ben Word
Scott Walkinshaw
QWp6t
Brad Ash
Capitol Information Group

Direct Dependencies

DependencyLast ReleaseScore
roots/sage-lib
Version ~9.0.0-beta.4
—
—
illuminate/support
Version 5.6.*
—
—
composer/installers
Version ~1.0
—
—
itcig/sagecontroller
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform