Package Health

ofearn/tobet

The package is small and clearly licensed, with no install-time scripts or repository identity concerns. Its 32-character README and absent security policy provide little guidance or transparency for an API framework, while the project shows no ongoing maintenance capacity.

Latest 1.0.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has only one release, published in October 2019, with no releases in the last 12 months. This is strong evidence of abandonment risk for a framework package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having had no development since October 2019. This materially lowers confidence in ongoing maintenance.

Package scaffoldingcaution

The artifact includes a very short 32-character README and no tests or changelog. Missing tests and changelog are normal in published artifacts, but the minimal consumer documentation is a real transparency gap for an API framework.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these values provide no supporting evidence of community review or maintenance.

Repo toolingcaution

Composer is used as the build tool, which is appropriate, but no security scanning tools are present. This is a modest repository-hygiene concern rather than evidence of an unsafe release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

ofearn

Direct Dependencies

DependencyLast ReleaseScore
pda/pheanstalk
Version ^4.0
guzzlehttp/guzzle
Version ^6.3

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform