legit-health/medical-device-sdk-bundle
This is a usable but relatively immature package with a stable MIT-licensed release, no registry deprecation, no install-time scripts, and an organization-owned repository that was updated at release time. However, maintenance evidence is thin: the package has only two releases across 442 days, no commits or active maintainers in the last three months, no tests or changelog in either artifact or repository, no security policy or scanning, and only one registry publisher. The linked repository also neither matches the package name nor mentions it in its README, which raises uncertainty about package-to-source alignment despite the organizational backing. Dependence is reasonable only with added review and an acceptance of limited maintenance transparency.
58%
Total Score
63
100
72
75
Health checks
Only one registry account, Gerardo, has publish access. The repository is organization-owned, which provides some backing, but registry publishing still appears concentrated in one account.
A README is present, but neither the artifact nor repository contains tests or a changelog. For an integration bundle, the absence of tests reduces maintainability and verification confidence.
The package is 442 days old but has only two releases, with one release in the last 12 months and a median interval of about 443 days. This indicates limited release and maintenance cadence.
The repository recorded zero commits and zero active maintainers during the last three months. Although it was pushed at release time, the recent inactivity is a meaningful maintenance concern.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral where no work is needed, but it also provides little evidence of an engaged maintenance community.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gerardo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/framework-bundle Version ^7.1 | — | — |
legit-health/medical-device-sdk Version ^1.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.