phospr/locale-bundle
The package has a clear MIT license, tests, and a usable README. Its last registry release was over five years ago, with no commits in the past three months and no recent release activity; the repository also does not identify the package in its README.
58%
Total Score
50
83
75
Health Score Breakdown
The latest release was over five years ago, with no releases in the last 12 months and only three releases overall. This materially raises maintenance and abandonment concerns.
There were no commits and no active maintainers in the past three months. Combined with the old latest registry release, this indicates currently weak maintenance activity.
The repository name does not match the package name and its README does not mention the package, so the repository linkage is less transparent. The coherent package file tree partly offsets this concern but does not remove it.
The repository has no security policy. This is a modest transparency gap, though the small package scope and absence of other workflow findings limit its effect.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Haskins-Vaughan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version >1.24 | — | — |
phospr/locale Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.