mvccore/ext-tool-cli-winfork
The focused artifact has clear documentation, a stable version, and no install-time scripts. Its very small user base, absent security policy, and committed password-named certificate file weaken confidence in long-term maintenance and release hygiene.
67%
Total Score
75
100
83
75
Health Score Breakdown
The small, focused tree matches a package that distributes a Windows utility, but it also contains a file named password_is_123456.pfx, which weakens release hygiene and warrants inspection.
Only two releases have appeared since May 2022, with none in the last 12 months and a median interval of about 924 days. The latest release is stable, but the sparse cadence raises maintenance concerns.
There were no commits or active maintainers in the last three months, consistent with the long release interval and reducing evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher, providing little external adoption evidence. This is supporting caution rather than proof of abandonment for a narrow utility.
Composer is used as a build tool, but no security scanning tool is configured, leaving less automated coverage for release hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Flidr |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mvccore/mvccore Version ^5.3 | — | — |
civicrm/composer-compile-plugin Version ^0.18 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.