Package Health

phile-cms/plugin-installer-plugin

The repository is small and has no recent commits, while the package has not been released since January 2018. Its one dependency and MIT declaration keep the maintenance burden low, but the repository does not clearly mention this package.

Latest 1.0.5PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was January 2018, with no releases in the last 12 months and a median interval of about 351 days. This is strong evidence of stagnation for a package still being considered for new adoption.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The repository is not archived and was pushed in July 2022, which softens but does not remove the maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository directly documents and maintains this package.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 2 watchers, indicating very limited visible adoption. Popularity is supporting evidence rather than a verdict, but it provides little compensating evidence for the inactivity.

Security policycaution

The linked repository has no security policy. This is a modest transparency gap, though the package is small and has no collected lifecycle install scripts.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Frank Nägler

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
8 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform