Package Health

nova-chart/chart-js-integration

A single maintainer, no security scanning or policy, and zero repository activity reduce confidence in ongoing support. The MIT license, clear README, changelog, and non-deprecated status provide useful transparency.

Latest v0.4.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package published 40 releases in a single burst on June 17, 2022, then had no releases in the following 12 months; it has been inactive for over four years. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the last push being over four years ago, this indicates a high abandonment risk.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.

Package scaffoldingcaution

The published artifact includes a 2,203-character README and a changelog; the absence of packaged tests is normal for a published library artifact. Repository tests are also absent, so there is no testing evidence to offset maintenance concerns.

Project backingcaution

The repository owner is an individual user, not an organization, and no stronger institutional backing is shown. That leaves limited visible continuity support for a package with no recent activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kuncoro Wicaksono

Direct Dependencies

DependencyLast ReleaseScore
laravel/nova
Version ^4.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform