netzmacht/php-leaflet
The source repository has had no commits for over three years, and issue activity has also stopped. The package remains licensed, documented, unarchived, and free of install-time scripts, but its workflow uses six unpinned actions and contains a high-confidence condition flaw.
55%
Total Score
50
100
88
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating stopped maintenance.
The package has made no release in over three years: its latest release was published on February 20, 2023, despite a history of 10 releases. This materially raises abandonment risk.
There were no new or closed issues or pull requests in the last month, with two issues and one pull request still open. This supports the conclusion that maintenance is currently inactive.
Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance weakness, though not severe on its own.
The repository has no security policy. This weakens vulnerability-reporting transparency, particularly for a library intended for integration into applications.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Molineus |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 beberlei/assert Version ~2.0 || ^3.0 | — | — |
symfony/event-dispatcher Version ^4.4 || ^5.1 | — | — |
netzmacht/php-javascript-builder Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.