jove/medoo
No commits or active maintainers were recorded in the last three months, and the latest release is over four years old. Unpinned workflow actions and no security policy add smaller transparency concerns, despite licensing, tests, and a clear README.
42%
Total Score
0
100
75
67
Health Score Breakdown
The package has had no release in over four years, and its 49 releases are clustered at the recorded starting point rather than showing ongoing delivery. This is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.
The repository is not archived, which is a compensating sign, but its last push was over four years ago and does not offset the lack of recent activity.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. The clear README and license provide some project transparency but do not cover this gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Angel Lai |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.