jasonterando/config-validator
Risky to adopt: this package has had only one release, over eight years ago, with no recent repository activity. It has useful documentation, tests, and a license, but the long abandonment gap and repository/package mismatch make it a liability for new projects.
38%
Total Score
100
50
83
Health Score Breakdown
The package has only one release, published over eight years ago, and none in the last 12 months. This is strong evidence that maintenance has effectively stopped.
The repository is not formally archived, which is positive, but its last push was over eight years ago. The lack of recent activity still indicates substantial abandonment risk.
The linked repository name does not match the package name and its README does not mention the package. That weakens confidence that the repository is the maintained source for this release.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these very low figures provide no meaningful community-maintenance signal.
Composer is used as the build tool, but no security-scanning tooling is present. This is a modest hygiene gap rather than a severe risk, especially since the repository has no active workflows.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mustangostang/spyc Version ^0.6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.