nunomaduro/collision
The repository is clearly tied to the package and includes tests, a security policy, and locked-down workflows. Recent work is concentrated in one maintainer, so continuity depends heavily on that person.
82%
Total Score
67
100
100
75
Health Score Breakdown
A post-update-cmd script is declared, which adds some package-manager behavior beyond ordinary library code. Because it is not an install-time script, the maintenance impact is limited.
The package and repository are owned by the same individual account, so there is no organization-backed maintainer pool to offset the concentrated contributor base.
All 4 recent commits came from one contributor, giving the project a concentrated maintenance base. The long release history partly offsets this, but continuity still depends heavily on one person.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nuno Maduro |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filp/whoops Version ^2.18.4 | — | — |
symfony/console Version ^7.4.14 || ^8.1.1 | — | — |
nunomaduro/termwind Version ^2.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.