Package Health

ivuorinen/business-data-fetcher

The repository includes tests, a changelog, release notes for this version, security scanning, and fully pinned workflow actions. Maintenance is thin, with one release in roughly two years and one contributor responsible for all recent commits; no security policy is published.

Latest v1.1.1PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has only 3 releases, all concentrated in August 2024, with no releases in the last 12 months despite being about 2 years old. The recent repository push is compensating evidence, but registry release activity remains limited.

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance dependent on a single active person; the repository is user-owned rather than organization-backed.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent maintenance activity even though the repository is not archived.

Security policycaution

The repository has no published security policy, which leaves vulnerability reporting and response expectations unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.4
spatie/data-transfer-object
Version ^3.9

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform