Package Health

plinct/web

The package has a clear README, a small runtime dependency set, and recent source activity. Its lack of a security policy leaves a modest transparency gap for long-term maintenance.

Latest 1.22.6PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file in the package or repository. This creates a material licensing concern for a dependency presented as open source.

Repo bus factorcaution

One contributor made all 5 commits in the last 3 months, so maintenance depends entirely on one person. The active contributor offsets abandonment concerns partially but does not remove the continuity risk.

Repo popularitycaution

The repository has no stars or forks and one watcher, indicating limited visible adoption. Popularity is supporting evidence only, so this modestly limits maturity confidence without determining the verdict.

Repo toolingcaution

Composer is used for builds, which fits the package ecosystem, but no security-scanning tooling was detected. For this small package, that is a modest hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, although the package's small scope and active maintenance provide some compensation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mauro Cruz

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
23 days ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform