Package Health

mattrothenberg/webmentions

Latest v2.3.1PackagistPackagist

32%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Registry deprecationdanger

Packagist marks the package as abandoned via packagist_abandoned, with no replacement specified. This is a severe warning for a new dependency and materially lowers confidence in its future maintenance.

Package file treecaution

The package and repository each contain only 7 files, including the core source, service provider, view, README, and license. The minimal structure is consistent with a small Statamic add-on, but leaves little visible scaffolding for validation or maintenance.

Package scaffoldingcaution

The artifact and repository include a substantial README, but neither includes tests or a changelog. For a small seven-file integration package this is a transparency and verification gap, not by itself proof that the package is unusable.

Project backingcaution

The repository is owned by an individual user rather than an organization. Individual ownership is not inherently unhealthy, but it provides less visible backing capacity and is consistent with the thin maintenance evidence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the abandoned registry status, this supports a substantial maintenance-risk assessment despite the recent push timestamp.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.2
—
—
simplepie/simplepie
Version ^1.5
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform