Package Health

monaye/nova-tippy-field

The package is clearly identified, documented, licensed, and has a small dependency surface. Its source repository is quiet and has no security policy, so future fixes are uncertain.

Latest 1.0.2PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

Only three releases were published, all during September 2020, with no releases in the last six years. This is a meaningful maintenance concern for a package that may need compatibility updates.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the repository having been quiet for years. This materially increases the risk that compatibility or defects will not be addressed.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it also indicates limited visible project backing.

Repo issue activitycaution

There is one open issue and no issue or pull-request activity in the last month. This is weak evidence of current maintenance, though the small project size limits what can be inferred.

Repo popularitycaution

The repository has five stars and five forks, indicating limited adoption and a small external support signal. Low popularity alone is not disqualifying, but it provides little evidence of broad ongoing use.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform