Package Health

ondrakoupil/app-tools

Its MIT license and focused README make the package easier to evaluate and adopt. Maintenance depends on one publisher, while the repository has no security policy or scanning and recorded no commits in the last three months.

Latest v2.10PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Dependency profilecaution

The package declares 14 runtime dependencies, including several PHP extensions and PSR interfaces. This is a meaningful integration surface but not excessive for the broad set of database, import, middleware, and utility features described.

Maintainerscaution

Only one account has registry publishing access. Because the repository is user-owned and recent releases exist, this indicates a limited bus factor rather than abandonment.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. The recent release provides some compensation, but the lack of current development activity still raises maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This leaves a gap in automated security hygiene for a package handling authentication, database access, and file operations.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ondřej Koupil

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.1
psr/http-message
Version ^1.0
ondrakoupil/tools
Version ^1.2.7
aspera/xlsx-reader
Version ^1.1
psr/http-server-handler
Version ^1.0

Weekly Downloads

Info

Last Published
4 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform