Package Health

mwstake/mediawiki-component-generictaghandler

Documentation and release support are solid, and the organization-backed project is still receiving updates. The small active contributor base, unpinned workflow actions, and unclear repository identity warrant extra scrutiny before adoption.

Latest 2.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo bus factorcaution

One contributor made all three commits in the last three months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown, so maintenance remains concentrated.

Repo commit activitycaution

Only three commits were made in the last three months, with one active maintainer. That shows recent activity but a relatively thin maintenance signal.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although name differences can occur in component repositories, both signals together make package-to-source identity unclear.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. For a reusable server-side component, that reduces transparency around vulnerability reporting and handling.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Hallo Welt! GmbH

Direct Dependencies

DependencyLast ReleaseScore
composer/installers
Version ~1.0|~2
—
—
mwstake/mediawiki-componentloader
Version ~1
—
—
mwstake/mediawiki-component-inputprocessor
Version ~1
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform