machy8/webloader
The repository includes tests, documentation, a matching project, and a valid BSD-3-Clause license. It is not deprecated or archived, but its long inactivity raises maintenance risk.
55%
Total Score
50
92
50
Health Score Breakdown
The package has 12 releases since October 2017, but its latest release was in December 2021 and it had no releases in the last 12 months. This indicates substantial maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release hiatus and increasing abandonment risk.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern because the package is a small PHP asset bundler.
The only workflow was fully analyzed with no audit findings or untrusted execution paths, but its single action reference is unpinned. That is a modest reproducibility and supply-chain hygiene gap, not a severe risk by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/neon Version ^2.4|^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.