Package Health

mathsgod/light

Regular releases, a stable major version, tests, and a recent GitHub release support ongoing maintenance. A small contributor base, absent security policy, and unpinned workflow actions warrant routine review.

Latest v1.44.4PackagistPackagist

80%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Dependency profilecaution

The package declares 29 runtime dependencies for a broad PHP framework covering GraphQL, authentication, databases, storage, and mail; this is substantial but consistent with its stated scope and is not by itself a health failure.

Project backingcaution

The repository is owned by a user account rather than an organization, so the concentrated contributor activity and single registry maintainer provide limited evidence of handoff capacity.

Repo bus factorcaution

Two contributors were active, but the top contributor made 24 of 28 commits, or about 86%, leaving maintenance meaningfully concentrated.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 1 watcher; this is weak supporting evidence, though popularity is not decisive for a small package with current activity.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for a framework handling authentication and authorization.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Raymond Chong

Direct Dependencies

DependencyLast ReleaseScore
ramsey/uuid
Version ^4.7
—
—
league/event
Version ^3.0
—
—
symfony/yaml
Version ^7.4
—
—
symfony/cache
Version ^7.4
—
—
sebastian/diff
Version ^7.0
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform