mongdch/mon-assets
The package includes a README, release notes, and a repository that clearly matches its name. It has no security policy or scanning, while the small project shows limited review and maintenance capacity.
43%
Total Score
25
75
75
Health Score Breakdown
The latest release was published in May 2020, and there have been no releases in the last 12 months. That long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged inactivity. No newer maintenance evidence compensates for this.
Only one registry maintainer is listed, leaving limited visible publishing capacity. The linked repository is user-owned rather than organization-backed, so there is no provided organizational signal to offset the thin maintainer base.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap, though it is less serious than the prolonged inactivity.
The repository has no security policy. This weakens vulnerability-reporting transparency for a package that manages application assets and database-backed state.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 MonGDCH |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mongdch/mon-env Version ^1.0 | — | — |
mongdch/mon-orm Version ^2.1 | — | — |
mongdch/mon-util Version ^1.0 | — | — |
mongdch/mon-store Version ^1.0 | — | — |
mongdch/mon-container Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.