makomweb/tactix
This is a young but currently active and reasonably transparent development tool. It has a clear MIT license, substantial documentation, source and test files, recent releases, an unarchived matching repository, CI/build tooling, Dependabot, and no registry deprecation or dangerous workflow patterns. The main concerns are that it remains a 0.x package, repository activity is modest and concentrated entirely in one contributor, the repository lacks a security policy, and its CI workflow does not declare top-level token permissions. These issues warrant monitoring and version pinning, but the recent release cadence and maintained repository make it a generally viable dependency.
78%
Total Score
60
50
89
80
Health Score Breakdown
Nine runtime dependencies, including PHP parsers and several Symfony components, create meaningful transitive maintenance exposure, although the profile is coherent with the documented analyzer and framework-bundle functionality.
Only one account has registry publish access. Because the repository is user-owned rather than organization-owned, this represents a genuine publishing continuity concern, though recent releases provide compensating evidence of current activity.
The repository is owned by the user account makomweb rather than an organization, so there is no organizational maintenance handoff indicated by this signal.
One contributor made all 3 commits in the last 3 months, with a 100% top-contributor share. This creates a clear single-maintainer continuity risk.
Only 3 commits were recorded in the last 3 months, indicating modest recent development activity rather than a strong maintenance cadence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Komischke |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^8.1 | — | — |
symfony/config Version ^8.1 | — | — |
symfony/console Version ^8.1 | — | — |
nikic/php-parser Version ^5.7 | — | — |
symfony/serializer Version ^8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.