malyusha/kodix
The codebase has no tests, security scanning, or security policy, limiting evidence of ongoing care. Its MIT license and matching repository make the package transparent, but not enough to offset the age.
38%
Total Score
50
60
50
Health Score Breakdown
The latest release was published in February 2017, and there have been no releases in more than nine years. This is strong evidence of abandonment for a library dependency.
There were no new or closed issues or pull requests in the past month, with no open issues or pull requests. Combined with the old last push, this provides no evidence of current maintenance.
Composer is used for builds, which is appropriate, but no security scanning tools are present. The missing scanning reduces supply-chain and vulnerability-monitoring evidence, though it is not severe on its own.
The repository is not archived, but it was last pushed in February 2017, corroborating the lack of recent registry releases and indicating inactive development.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a library with database, file, PDF, and XML functionality.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Igor Malyuk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^1.2 | — | — |
symfony/var-dumper Version ^2.8 | — | — |
symfony/http-foundation Version 2.8.1 | — | — |
mobiledetect/mobiledetectlib Version ^2.8 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.