Package Health

lifo/autocomplete-bundle

The latest release is about a year old, and no commits were recorded in the last three months. A single maintainer and no security policy or scanning reduce long-term confidence, though the repository is active, licensed, unarchived, and clearly matches the package.

Latest v2.1.2PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Maintainerscaution

Only one registry publishing maintainer is listed, leaving limited visible publishing redundancy. The repository is user-owned rather than organization-backed, so there is no provided backing signal to offset that thin maintainer base.

Package scaffoldingcaution

The package includes a substantial README, while the absence of tests and a changelog is normal for a published artifact and is not treated as a gap here. Repository-level test and changelog support is not present, so this provides only limited project transparency.

Release historycaution

The package has 10 releases over about 4 years, but only one release in the last 12 months; the latest release is about a year old. This indicates a modest, currently slow release cadence rather than abandonment by itself.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. The recent release and repository push compensate for abandonment risk somewhat, but current development activity remains weak.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jason Morriss

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform