joppnet/jn_lighterbox
Its focused artifact has a clear README, license, and minimal runtime dependency. The repository is small and lacks security scanning and a published security policy.
68%
Total Score
75
100
81
50
Health Score Breakdown
A GPL license file is present in both the artifact and repository. The artifact detects GPL-2.0 while the manifest declares GPL-2.0-or-later, so the narrower detected text warrants a small compatibility check.
The package has existed since 2017 with 23 releases, but only one release in the last 12 months; the latest release is recent, so this indicates a slower cadence rather than abandonment.
There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the current development gap is a maintenance concern.
Composer is used for the build, but no security scanning tools are present. This is a modest transparency and hygiene gap, not evidence that the package is unsafe.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Stefan Riedel |
| Oliver Schlöbe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^9.5 || ^10.4 || ^11.5 || ^12.4 || ^13.4 || ^14.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.