Package Health

kununu/data-fixtures

Healthy and reasonable to depend on. It has a long release history, a current stable release, active organizational backing, tests, documentation, and security tooling; recent development is limited to one commit from one contributor, so continued maintenance should be monitored.

Latest v15.1.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

All one recent commit came from a single contributor, which creates concentration risk; the organization-owned repository provides some capacity to hand maintenance to others.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer; this is a meaningful sign of limited recent development, although the recent release history provides some compensation.

Token permissionscaution

Neither analyzed workflow declares top-level token permissions, leaving workflow privilege limits less explicit than ideal; no workflow has declared top-level write access.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Hugo Gonçalves
João Alves

Direct Dependencies

DependencyLast ReleaseScore
composer/semver
Version ^3.4

Weekly Downloads

Info

Last Published
5 days ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform