Package Health

kslimani/snga

Its two runtime dependencies and lack of install-time scripts keep the package simple to integrate. The single-maintainer profile and proprietary license add ownership and licensing concerns; the repository could not be found for verification.

Latest 1.0.2PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historydanger

The latest release was in April 2017, with no releases in the last nine years. That long period without updates creates a strong abandonment risk despite the package having four releases overall.

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file. This creates a meaningful licensing concern for a package presented as an open-source dependency.

Maintainerscaution

Only one registry maintainer is listed, leaving limited visible ownership capacity and increasing continuity risk if that maintainer stops supporting the package.

Package scaffoldingcaution

The package artifact has no README, while its small PHP library surface suggests consumers would benefit from usage guidance. Missing tests and a changelog are normal for a published artifact and are not treated as gaps here.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Karim Slimani

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform