lucasbustamante/stubz
The package has a clear README, tests, changelog, matching repository, and a modest dependency set. Its single-maintainer project has no commits in three months, and the license mismatch and unpinned workflow actions reduce confidence for long-term use.
57%
Total Score
50
100
72
83
Health Score Breakdown
The manifest declares MIT, but the artifact detector found GPL-3.0 license text, creating an unresolved licensing mismatch despite multiple license files being present.
Registry publishing is controlled by one maintainer. That is a limited publishing base, and the project-backed evidence does not show a broader active contributor group.
The repository is owned by an individual account rather than an organization, so the single registry maintainer provides limited visible backing for continuity.
Only two releases have been published over roughly 19 months, with one release in the last 12 months and a median interval of about 231 days; this indicates a slow release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of recently stalled maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lucas Bustamante |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^6.0 | — | — |
fidry/cpu-core-counter Version ^1.2 | — | — |
roave/better-reflection Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.