Package Health

lukesnowden/composer-bower-plugin

Composer plugin for installing Bower packages

Latest 1.2.3PackagistPackagist

38%

Total Score

unhealthy

Risky: no release or commit activity since June 2017, with a license mismatch and no security policy.

Health Score Breakdown

Release historydanger

The last registry release was June 28, 2017, and there have been no releases in the last 12 months. This is a substantial abandonment concern for a dependency whose ecosystem may evolve.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the last push in 2017, this indicates a strong lack of current maintenance capacity.

Licensecaution

The manifest declares MIT while the artifact license file is detected as BSD-2-Clause; although license files exist in both the artifact and repository, the mismatch creates avoidable licensing uncertainty.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no provided evidence of institutional backing to compensate for the thin maintainer and activity signals.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Low popularity is supporting evidence rather than a verdict, but it offers little indication of an active user or contributor base.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Cláudio Silva
Impactwave

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform