ivanlulyf/mineblog
The package has a readable README, a matching source repository, and no install-time scripts. Its MIT license file conflicts with the manifest's proprietary declaration, and the repository has no security policy or scanning tools.
44%
Total Score
50
79
75
Health Score Breakdown
The artifact includes an MIT license file and the repository also has a license file, but the manifest declares the package proprietary. That mismatch creates avoidable legal and usage uncertainty.
The repository is owned by an individual account rather than an organization. That is not inherently unhealthy, but it provides less visible backing for a project that has already gone inactive.
The latest release was published in December 2019, with no releases in the last 12 months and only four releases overall. This is a substantial maintenance concern for a deployable blog application.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this indicates a strong abandonment risk.
Composer is used as a build tool, supporting reproducible project setup, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence of malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 author's name |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 joyqi/hyper-down Version dev-master | — | — |
ivanlulyf/bunnyphp Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.