jabli/fono
The latest release is stable and the repository matches the package, but recent commit activity is absent and licensing is unclear. Choose the listed replacement package instead.
20%
Total Score
50
69
75
Health Score Breakdown
Packagist marks the entire package as abandoned and names criq/fono as its replacement, making this release unfit for a new dependency despite other healthy indicators.
No declared license or license file was found, leaving the legal terms for reuse unclear.
The artifact includes a README, but it is only 7 characters long; missing tests and a changelog in the published package are normal packaging practice and are not concerns here.
There were no commits and no active maintainers in the three months before collection, which weakens evidence of continuing maintenance.
Composer is used as the build tool, but no security scanning tooling is present, leaving a modest transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 criq/katu Version ^8 | — | — |
giggsey/libphonenumber-for-php Version @stable | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.