Package Health

natilosir/auth

The four runtime dependencies add maintenance surface, while the repository has no security tooling. MIT licensing, a README, and no install scripts are positives.

Latest 1.0.0PackagistPackagist

58%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The package declares four runtime dependencies, including session, cookie, and ORM components, which increases the maintenance and compatibility surface. No compensating dependency evidence was provided.

Release historycaution

Only one release exists, published about 1 year and 8 months ago, with no releases in the last 12 months. This is meaningful evidence of limited ongoing maintenance.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, providing little independent evidence of maturity or broad review. Low popularity alone is not a severe concern for a small package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency gap for an authentication library.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Natilos.ir

Direct Dependencies

DependencyLast ReleaseScore
natilosir/orm
Version ^1.0
natilosir/cookie
Version ^1.0
natilosir/jalali
Version ^1.0
natilosir/session
Version ^1.0

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform