Package Health

leafs/skeleton

The package includes a README, exact-version release notes, and a repository that clearly matches it. Its lone registry maintainer is backed by an organization, but the project shows no recent work and lacks a security policy.

Latest v3.2.1PackagistPackagist

12%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

56

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on this release.

Release historydanger

The package has eight releases since July 2020, but none in the 12 months before this assessment; the latest release was on 14 March 2023. That long release gap reinforces the abandonment risk.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the preceding three months. This provides no evidence of ongoing maintenance to offset the archived status.

Repository archiveddanger

The linked repository is archived, which indicates the project is no longer intended for active maintenance. Its last push was in August 2024, after the last package release but still consistent with a discontinued project.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a minor transparency and maintenance weakness rather than the reason the package is unfit.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michael Darko

Direct Dependencies

DependencyLast ReleaseScore
leafs/auth
Version *
—
—
leafs/cors
Version *
—
—
leafs/form
Version *
—
—
leafs/leaf
Version ^3.3
—
—
leafs/bareui
Version *
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform