picturae/oai-pmh
The package includes a clear README, tests, a license, and a small runtime dependency set. Its install hook and lack of repository security tooling add maintenance concerns for a library that otherwise has useful project structure.
38%
Total Score
75
100
78
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package provided; this is a major warning for future maintenance and support.
A post-install-cmd script runs during installation, adding execution complexity and a modest supply-chain review concern even though no maliciousness verdict is implied.
The package has existed since 2015 with 28 releases and one release in the last 12 months, showing established history but a sparse recent cadence.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no recent development activity despite the package having a current stable release.
There are no open issues or pull requests and no recent issue or pull-request activity; this is consistent with a quiet project but does not demonstrate active maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Picturae |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.2 || ^2.4 | — | — |
psr/http-message Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.