Package Health

oneplace/oneplace-job

The BSD-3-Clause license, tests, README, and organization-backed repository provide useful maintenance and usage context. The small dependency set and package-repository match reduce integration concerns, but the absent security policy and install-time script leave additional review work.

Latest 1.0.4PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has had only 3 releases, with the latest published nearly six years ago and none in the last 12 months. This is strong evidence of abandonment risk despite the short historical release interval.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. That materially lowers confidence in ongoing maintenance.

Lifecycle scriptscaution

The package defines a post-create-project-cmd install-time script. Such scripts can be legitimate, but they add execution and review surface when adopting an otherwise stale package.

Repo popularitycaution

The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the stale maintenance record.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. This is a hygiene gap rather than evidence that the release is unsafe by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
oneplace/oneplace-core
Version ^1.0.19
—
—
phpoffice/phpspreadsheet
Version ^1.10
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform