Package Health

mh/collection

My toolbox

Latest 1.0.6PackagistPackagist

42%

Total Score

unhealthy

No releases or commits since February 2019, with little project hygiene and a broad runtime dependency surface.

Health Score Breakdown

Release historydanger

The package has had no release in more than 7 years: its latest release was February 12, 2019, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving no evidence of current maintenance capacity.

Dependency profilecaution

The package declares 10 runtime dependencies and no development dependencies, creating a broad transitive maintenance and compatibility surface for a small toolbox package.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher, providing little supporting evidence of community review or adoption. Popularity is supporting evidence rather than a verdict, so this is a minor concern.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is less severe than the lack of recent activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michael Holm

Direct Dependencies

DependencyLast ReleaseScore
mh/json-ld
Version ^1.0
—
—
mh/pageseo
Version ^1.0
—
—
cocur/slugify
Version ^3.2
—
—
geoip2/geoip2
Version ^2.9
—
—
mh/translator
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform