lesichkovm/php-state-machine
The package is tiny and easy to inspect, with tests, a README, and no runtime dependencies. Its proprietary license limits reuse, and there has been no release or commit activity since March 2022.
40%
Total Score
50
100
63
Health Score Breakdown
The manifest declares a proprietary license, with no license file detected in the package or repository. This creates a significant reuse and legal-risk concern for an open-source dependency.
Only two releases were published, both in March 2022, with no releases in the last 12 months. This is strong evidence of an inactive project, though the package is small and may need few changes.
The repository had zero commits and zero active maintainers in the last three months, consistent with the last push in March 2022. No provided signal shows ongoing maintenance capacity.
Version v0.2.0 is not a stable major release, so compatibility guarantees are limited. The absence of recent releases makes this more concerning for long-term dependency use.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. Both action references are unpinned, a minor reproducibility and workflow-hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Milan Lesichkov |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.