Package Health

leafs/mvc-core

Healthy and actively maintained, with sensible caveats. It has regular releases, current repository activity, tests, and organizational backing, but all recent commits come from one contributor and the repository lacks a security policy and explicit workflow permissions.

Latest v5.2.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

90

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Repo bus factorcaution

One contributor made all 31 commits in the last 3 months, creating a genuine continuity risk; organizational ownership provides some capacity to hand maintenance off.

Repo toolingcaution

Composer build tooling is used, but no security scanning tools were detected; this limits automated security-quality coverage without making the package unfit to use.

Security policycaution

No repository security policy was found, reducing transparency around vulnerability reporting and response expectations.

Token permissionscaution

The only workflow lacks top-level token permissions, so its GitHub Actions access is not explicitly constrained to read-only or minimal permissions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michael Darko

Direct Dependencies

DependencyLast ReleaseScore
leafs/db
Version ^5.1
leafs/leaf
Version ^5.0
leafs/sprout
Version ^5.1
symfony/yaml
Version *
vlucas/phpdotenv
Version *

Weekly Downloads

Info

Last Published
8 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform