pharmit/push
The small dependency set and clear README make the package straightforward to inspect. Its source project has no recent activity and provides no security policy, increasing maintenance risk for a library handling push services.
38%
Total Score
0
33
50
Health Score Breakdown
The package has made no release in the last 12 months, and its latest release was in July 2018 after only seven releases overall. This long release gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. For a maintained integration library, this indicates that fixes and compatibility updates are unlikely.
Neither the package nor the linked repository contains a license file, and no license is declared. That creates a real legal and adoption risk for downstream projects.
The repository has only 6 stars and 4 forks, providing little evidence of a broad support community. Low popularity is supporting caution rather than a verdict on its own.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less serious than the prolonged lack of maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ~6.1 | — | — |
illuminate/support Version >=5.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.