kazist/suppliers
The package has a declared LGPL-3.0 license, a matching repository, and organization backing. Its extremely small README and lack of security tooling leave little transparency for a package that has not evolved.
38%
Total Score
100
63
50
Health Score Breakdown
Only two releases were published, both within about two days, and there have been no releases in roughly 9 years and 2 months. This strongly indicates abandonment risk.
A README is present, but it contains only 12 characters and provides no practical usage or maintenance context. Missing tests and changelog files are normal for published artifacts and are not gaps by themselves.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these figures provide no supporting evidence of community adoption or review.
The repository uses Composer, which supports reproducible PHP package installation, but it has no reported security scanning tools. Given the package's age, this is a modest transparency and maintenance concern.
The repository is not archived, which is a positive counter-signal, but its last push was about 9 years and 2 months ago, so the unarchived status does not demonstrate active maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dedan Irungu |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.