moonshine/core
This release appears suitable for dependency use and is supported by a healthy release cadence, stable versioning, a non-deprecated registry status, an active unarchived organization-owned repository, clear licensing, and a package tree that matches the linked project. The main concerns are concentrated recent development in one contributor, no repository security policy or security scanning, no tests or changelog in the collected artifact/repository, and very low repository popularity; these reduce resilience and transparency but do not outweigh the evidence of ongoing maintenance and organizational backing.
78%
Total Score
70
100
89
90
Health Score Breakdown
Only one registry account has publish access, which is a concentration concern in isolation. The linked repository is organization-owned, providing some backing, but registry publishing remains dependent on one account.
All 5 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown in this signal.
There were no new or merged pull requests and no new or closed issues in the last month, which gives limited evidence of community activity. This is softened by the separate evidence of recent commits and regular releases.
The repository reports zero stars and forks and only one watcher, so there is little public adoption evidence. Popularity is supporting evidence rather than a verdict, and the maintenance signals compensate for much of this gap.
Composer build tooling is present, but no security scanning tools are configured. The build setup is appropriate, while the missing security automation is a hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Danil Shutsky |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^2.0 | — | — |
psr/http-message Version ^2.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
moonshine/support Version ^4.0 | — | — |
illuminate/support Version ^10|^11|^12|^13 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.