jonquihote/pluggable
Documentation is strong, and the source includes tests despite the artifact omitting them. The MIT license and clean, read-only workflow permissions reduce adoption friction.
68%
Total Score
50
83
67
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script during installation. This is a modest supply-chain and installation-complexity concern because code executes automatically, though the signal does not establish harmful behavior.
The repository is owned by an individual user rather than an organization, so the concentrated contributor activity is not offset by visible organizational handoff capacity.
The package is only 54 days old and has just 2 releases, so there is limited evidence of sustained maintenance. Both releases arrived within about 4 hours, showing initial activity but not long-term durability.
One contributor made 100% of the 3 recent commits. That concentration leaves limited backup capacity if the maintainer becomes unavailable.
The repository had 3 commits in the last 3 months, showing some recent activity but a small maintenance record for a package this new.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joni Chandra |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 crell/tukio Version ^2.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.