Package Health

justoverclock/christmas-snow-effect

The package is small and easy to inspect, with a clear README, MIT licensing, and one runtime dependency. Its last release and repository activity were nearly five years ago, so maintenance and compatibility risk are significant.

Latest 0.1.3PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has made no release in nearly five years and has had no releases in the last 12 months. Its three releases were clustered within about two weeks, indicating a mature but inactive release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed ongoing maintenance.

Repo popularitycaution

The repository has only 2 stars, 1 fork, and 1 watcher. This is supporting evidence of a small project, not a concern by itself, but it provides little external maintenance signal.

Security policycaution

The repository has no security policy. For a small Flarum extension this is a transparency gap, though the simple package structure limits how much weight it carries.

Workflow auditcaution

No GitHub Actions workflows were present, so no workflow hazards were found. This is limited assurance rather than evidence of active build or security automation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marco Colia

Direct Dependencies

DependencyLast ReleaseScore
flarum/core
Version ^1.0.0

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform