oat-sa/composer-npm-bridge
The package is well documented, tested in its repository, licensed, and backed by an organization. Maintenance has gone quiet since the February 2025 release, with no commits in the last three months and no security policy or scanning tools.
64%
Total Score
75
100
86
75
Health Score Breakdown
The package has 8 releases since May 2019, but none in the last 12 months; the latest release was published on February 7, 2025. This points to a meaningful slowdown, though the package has an established release history.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no recent development activity. The recent release provides some compensation but does not remove the maintenance concern.
The repository uses Make and Composer for builds, showing basic project tooling. No security scanning tools were detected, which leaves a modest security-maintenance gap.
The repository has no security policy. This reduces transparency about vulnerability reporting and response, although it is not evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Erin Millard |
| OAT SA |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.