phug/js-transformer-filter
Workflow dependencies are unpinned, and the repository has no security policy or scanning tool. The small project has clear ownership, tests, a matching repository, and a clean license, but its limited activity warrants pinning this version.
62%
Total Score
75
100
83
75
Health Score Breakdown
The package has five releases since October 2017, but none in the last 12 months and its latest release was about 18 months ago, indicating a slow maintenance cadence.
There were no commits and no active maintainers in the last three months; together with no release in the last year, this indicates reduced recent activity.
The repository has four stars, zero forks, and two watchers. This is limited adoption evidence, though popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phug/phug Version ^1.9.0 || ^2.0 | — | — |
js-transformer/js-transformer Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.