Package Health

marcocesarato/amwscan

Healthy and actively maintained, with strong documentation, frequent releases, and substantial recent repository activity. Dependence is somewhat concentrated in one maintainer, and installation scripts plus a missing security policy warrant review before adoption.

Latest 0.21.11PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

63

Health Score Breakdown

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which increase installation-time behavior and deserve review before use, although the repository otherwise shows mature build and release structure.

Maintainerscaution

Only one account has registry publish access, which creates publishing continuity risk, though repository activity shows multiple recent contributors and the owner remains active.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated contributor and registry maintainer base is more consequential for long-term continuity.

Repo bus factorcaution

Commit activity is highly concentrated: one contributor made about 93% of recent commits, despite two other contributors remaining active, leaving a meaningful single-maintainer continuity risk.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response procedures.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marco Cesarato

Direct Dependencies

DependencyLast ReleaseScore
paragonie/sodium_compat
Version ^1.20

Weekly Downloads

Info

Last Published
6 days ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform