Package Health

khalyomede/php-typo

The package includes a clear MIT license, a substantial README, tests, and a changelog. Its single maintainer, minimal repository activity, absent security policy, and unpinned workflow actions leave limited evidence of ongoing care.

Latest 0.4.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Maintainerscaution

Only one account has registry publishing access, leaving a thin publishing base. This is not proof of poor maintenance, but there is no organizational backing signal to compensate for it.

Release historycaution

The latest release was published in November 2023, with no releases in the last 12 months and only three releases overall. This is meaningful maintenance caution for a dependency, though the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Repo popularitycaution

The repository has zero stars and forks and one watcher, so there is little visible community adoption or review activity. Popularity is supporting evidence rather than a verdict, but it provides no compensating assurance here.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Khalyomede

Direct Dependencies

DependencyLast ReleaseScore
symfony/console
Version 6.3.8
—
—
nikic/php-parser
Version 4.17.1
—
—
aminnairi/string-extra
Version 0.1.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform