jellyhaus/jellydrop
The package includes a clear license, README, substantial source files, and tests, while its two runtime dependencies keep the footprint small. Its post-autoload-dump install hook deserves review before adoption.
55%
Total Score
50
100
90
75
Health Score Breakdown
A post-autoload-dump install-time script runs during Composer installation. This is not inherently unsafe, but it adds installation behavior that should be understood before depending on the package.
Only one registry account has publish access. This does not prove poor maintenance, but it indicates a limited visible publisher base and increases ownership concentration risk.
The package is only 52 days old, with six releases and a median interval of about 52 minutes, indicating early and bursty release activity rather than established maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jason Millis |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.