lacv/pipo-scanner
Its small dependency set and balanced activity from two contributors support a manageable maintenance surface. The project is young, so its long-term track record is not yet established.
76%
Total Score
83
100
88
75
Health Score Breakdown
Only one registry maintainer, LACV, has publish access. This is a mild concentration concern, though the source repository shows activity from two contributors.
The package is young at 175 days old, with four releases and the latest released about 53 days ago. This shows some activity but leaves a limited long-term maintenance record.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a transparency and hygiene gap rather than a severe risk on its own.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 LACV |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^3.0|^5.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.