Package Health

onetoweb/lightspeed

Usable with caveats: this is a small, coherent client with a clear MIT license and organization-backed repository, but it has had no release or commit activity since March 2022. Depend on it only if the API remains stable and you can accept maintaining it yourself.

Latest v1.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historycaution

The package has only one release, published about 4 years 6 months ago, with no releases in the last 12 months. That indicates limited maturity evidence and substantial abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the lack of releases since March 2022. The repository is not archived, but there is no observed recent maintenance.

Repo popularitycaution

The repository has 1 star, 0 forks, and 2 watchers, providing little community evidence or outside support. Low popularity is supporting evidence rather than a decisive problem for a small client library.

Repo toolingcaution

Composer is used as the build tool, providing expected ecosystem tooling, but no security scanning tools are configured. For this small package that is a hygiene gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no published security policy. This reduces transparency for reporting vulnerabilities, although the package's small scope and lack of observed dangerous workflows limit the significance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jonathan van 't Ende

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.0 || ^7.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform