Package Health

kolyunya/codeception-markup-validator

Usable with caveats: the package is licensed, tested, clearly tied to its repository, and has no deprecation or workflow-risk indicators. However, it has had no release or commit activity for over three years, with no recent issue resolution and no published security policy.

Latest 5.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. With the latest release also more than three years old, this is the main abandonment risk.

Release historycaution

The package has 10 releases since April 2017, but its latest release was in February 2023 and there were no releases in the last 12 months. This indicates materially slowed maintenance despite a stable release history.

Repo issue activitycaution

There are four open issues and one open pull request, but none were opened or closed and no pull requests were merged in the last month. This suggests limited current responsiveness.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. For a small package this is a meaningful transparency gap, though it is not by itself evidence that the package is unsafe.

Repository archivedcaution

The linked repository is not archived, so it remains available for maintenance. Its last push was in February 2023, which is consistent with the separate evidence of inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kolyunya

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.0
—
—
codeception/codeception
Version >=2.0 <6.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform