Package Health

landkit/php-uploader

Its repository provides little operational assurance for long-term use. There is no security policy or security scanning, and the project has no visible adoption or issue activity. The small, matching repository and lack of install scripts reduce, but do not offset, the abandonment concern.

Latest 1.0.0PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has made only one release, on August 28, 2021, with no releases in the last 12 months. This is strong evidence of an abandoned dependency rather than an actively maintained one.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, while its last push was in August 2021. That leaves no recent maintenance capacity visible.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing no supporting evidence of community adoption or review. Popularity is not required for health, but this offers no compensation for the maintenance gap.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for a PHP package, but no security scanning tools are present. The missing scanning lowers assurance without proving a security problem.

Security policycaution

The repository has no security policy, which reduces transparency and gives consumers no documented path for reporting vulnerabilities. This is a meaningful hygiene gap for a dependency, though it is less severe than the lack of maintenance activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Land Kit

Direct Dependencies

DependencyLast ReleaseScore
landkit/php-functions
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform