Package Health

larva/laravel-flysystem-kodo

The package is small and focused, with a clear README, stable version, and organizational ownership. There is no security policy or automated security scanning, leaving maintenance transparency thinner than ideal.

Latest 2.1.0PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has made only 3 releases since March 2022, with one release in the last 12 months and a typical gap of about 2 years and 2 months. The recent release shows the project is not fully abandoned, but the cadence is slow.

Repo bus factorcaution

All recent commit activity comes from one contributor, creating a fragile maintenance base. Organization ownership partly offsets this because maintenance can potentially be handed off, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 1 commit in the last 3 months from 1 active maintainer. This shows some current activity, but provides limited evidence of sustained maintenance capacity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a package handling object-storage credentials and uploads, this leaves vulnerability-reporting expectations unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
league/flysystem
Version ^3.0
—
—
laravel/framework
Version ^12.0 | ^13.0
—
—
larva/flysystem-kodo
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform