marciorosa/blog
The linked project has no security policy or security scanning, and its single-user ownership offers limited continuity. Tests are present and the release is not deprecated, but those positives do not offset the long inactivity, missing license, and uncertain repository match.
38%
Total Score
50
64
75
Health Score Breakdown
This is the package's only release, published about 5 years and 6 months ago, with no releases in the last 12 months. That strongly increases abandonment risk.
No declared license or license file was found, leaving developers without clear permission to use, modify, or redistribute the package.
One registry maintainer is consistent with a small individual project, but there is no broader maintainer base shown to provide continuity if the publisher becomes unavailable.
The linked repository name does not match the package name, and no README mention was collected. The repository may not clearly document ownership of this package.
Composer build tooling is present, but no security scanning tools were found. This is a modest hygiene gap rather than evidence of abandonment by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marcio Rosa |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.