jelix/castor
The project has clear licensing, tests, documentation, and organizational ownership. Its small audience, absent security policy, and no commits in the last three months warrant monitoring as adoption risk.
72%
Total Score
75
100
83
75
Health Score Breakdown
The package has existed since November 2015 and received one release in the last 12 months, with a latest release on March 23, 2026. The long median interval of about 252 days indicates a deliberate but slow cadence rather than abandonment.
There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the same period includes a current release and repository push.
The repository has 1 star, 1 fork, and 1 watcher, indicating a very small user and contributor community. Low popularity is supporting evidence of limited external validation, not proof of poor quality.
The repository uses Composer, but no security scanning tools were detected. That leaves a security-process gap for a package that processes templates and can handle untrusted input.
The repository has no security policy. This weakens vulnerability-reporting transparency, though it is not evidence of a vulnerability by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Laurent Jouanneau |
| Loic Mathaud |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jelix/simplelocalization Version 1.7.* | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.