lochmueller/custom-shortcut
The package has a stable major release, a declared license, and no deprecation or install scripts. Its small audience, quiet recent commit activity, and workflow hygiene leave some maintenance and supply-chain uncertainty.
69%
Total Score
50
100
83
67
Health Score Breakdown
The package and repository are owned by the same individual account, so the source ownership is consistent, but there is no organizational backing shown. This leaves a relatively thin maintenance base.
The package has existed since November 2020 with 11 releases and one release in the last 12 months. That shows ongoing publication, but the roughly 162-day median interval indicates a modest cadence.
There were no commits and no active maintainers during the last three months. Even with a recent recorded push, this indicates currently quiet development and raises abandonment risk.
The repository has only 3 stars and 6 forks. This is weak supporting evidence for community review, though low popularity alone does not make a small maintained package unhealthy.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^11.4||^12.4||^13.4 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.