onetoweb/onlineparcel
The small five-file project has no security scanning or policy, leaving limited evidence of ongoing oversight. Its MIT license, matching repository, and stable nondeprecated release provide useful transparency, but adoption remains a liability.
43%
Total Score
75
79
50
Health Score Breakdown
The package has only two releases, with none in the last five years and the latest published in September 2021. This is strong evidence of stalled maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
Composer build tooling is present, but no security scanning tools were detected. For a small client library this is a meaningful oversight gap, though it is not evidence of unsafe behavior by itself.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This adds transparency risk alongside the lack of recent activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jonathan van 't Ende |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.