Package Health

nette/code-checker

It has a long release history, a recent release, repository tests, and clear licensing. Organization backing and a security policy help, but recent repository activity is absent and workflow actions are not pinned.

Latest v3.4.1PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. Although a release occurred recently, the absent recent commit activity is a meaningful maintenance warning.

Repo issue activitycaution

There were no new or closed issues in the last month and no merged pull requests, with one pull request open. This is consistent with a quiet project and reinforces the recent activity concern, though it does not show abandonment by itself.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Workflow auditcaution

All 3 workflows were analyzed successfully with no detected dangerous findings or untrusted checkouts. However, all 11 action references are unpinned, leaving workflow dependencies exposed to upstream changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

David Grudl

Direct Dependencies

DependencyLast ReleaseScore
nette/neon
Version ^3.0
—
—
latte/latte
Version ^3.0.7
—
—
nette/forms
Version ^3.0
—
—
nette/utils
Version ^4.0
—
—
nette/assets
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform