jkphl/rdfa-lite-microdata
It includes repository tests, a changelog, release notes for v0.4.7, and a matching source repository. MIT licensing and a small dependency set are clear, but security scanning and a security policy are absent.
62%
Total Score
50
100
86
50
Health Score Breakdown
The package has 13 releases since February 2017, but its latest release was on January 27, 2023, with no releases in the last 12 months. That long pause lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release pause. The repository is not archived, but current maintenance activity is not evident.
Composer build tooling is present, but no security scanning tools were detected. This is a maintenance and transparency gap rather than evidence of unsafe behavior.
The linked repository has no security policy, leaving no documented process for reporting and handling vulnerabilities. This is a transparency gap for a parser library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joschi Kuphal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jkphl/dom-factory Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.