mrcnpdlk/blox
Risky to adopt for new projects: the release is mature and clearly packaged, but there has been no release or repository commit activity for nearly nine years. Its lack of deprecation and simple dependency profile help, yet the long inactivity makes future compatibility and maintenance uncertain.
42%
Total Score
0
100
75
100
Health Score Breakdown
The package has 8 releases since August 2012, but none in the last 12 months and its latest release was in November 2017. This long release gap is a substantial abandonment and compatibility risk.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the nearly nine-year gap since the last push. This strongly lowers confidence in ongoing maintenance.
Composer is used as a build tool, but no security scanning tools are present. This is a transparency gap, though it is secondary to the much stronger maintenance concern.
The linked repository is not marked archived, which is a useful compensating signal, but its last push was still in November 2017. The unarchived status does not offset the prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Erin Millard |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.