Package Health

ivopetkov/lock

The package is small and focused, with a single runtime dependency and a tested source repository. Maintenance capacity is limited by one registry maintainer, no recent commits, and no security scanning, though the latest stable release remains current enough.

Latest v1.4.0PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Maintainerscaution

Only one account has registry publishing access, so release continuity depends on a narrow publishing base. The repository is user-owned rather than organization-backed, offering no compensating organizational capacity.

Project backingcaution

The registry namespace and repository are owned by the same individual, confirming ownership consistency but providing no broader organizational backing.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months. The recent release partly offsets this, but the pause weakens evidence of ongoing maintenance.

Repo popularitycaution

The repository has 7 stars, 2 forks, and 1 watcher. This is limited adoption evidence, but popularity is only supporting context and does not outweigh the maintenance signals.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a maintenance and transparency gap, not proof of unsafe code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ivo Petkov

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 months ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform