ivuorinen/branch-usage-checker
Clear tests, release notes, build tooling, and pinned workflow actions improve transparency. There is no security policy, and maintenance remains concentrated in one contributor with widely spaced releases.
70%
Total Score
50
93
67
Health Score Breakdown
The package defines a post-autoload-dump Composer lifecycle script. This is a normal Composer hook, but it adds install-time behavior that consumers should understand.
The repository is owned by an individual user rather than an organization, so the one-person contributor concentration is not offset by visible organizational backing.
The package has existed since December 2022 but has only four releases, with a median interval of about 488 days and one release in the last 12 months. The current release is recent, which partly offsets the sparse cadence.
One contributor made all two commits in the last three months, giving the project a 100% top-contributor share. This leaves maintenance dependent on a single active person.
Only two commits were recorded in the last three months, although five pull requests were merged in the last month and the current release was just published. Recent work is present but commit activity is light.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ismo Vuorinen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.