jawira/mini-getopt
The package is clearly documented, licensed, and tested in its repository. Its small maintainer and user base, absent security policy, and unpinned workflow actions leave less support and build assurance if maintenance stops.
65%
Total Score
50
88
50
Health Score Breakdown
The package has 13 releases over about eight years, but none in the last 12 months and the latest release was about 22 months ago. This indicates materially reduced maintenance activity despite a previously established release history.
The repository recorded no commits and no active maintainers during the last three months, consistent with the long gap since the latest release. The repository is not archived, but current maintenance activity is absent.
The repository uses Composer and Phing build tooling, showing a defined build process, but it reports no security-scanning tools. The missing scanning is a minor assurance gap rather than evidence of unsafe code.
The repository has no security policy. For a maintained dependency this reduces transparency about vulnerability reporting and response.
The workflow audit completed cleanly with no high- or medium-confidence findings, dangerous untrusted triggers, or injection sinks. However, all three action references are unpinned, leaving a modest build-reproducibility and action-integrity gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jawira Portugal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jawira/the-lost-functions Version ^1.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.