Package Health

ponponumi/match_pos

The package is small but has a clear MIT license, repository tests, and no install-time scripts. Its single-maintainer, low-activity project offers limited evidence of ongoing support.

Latest 1.0.1PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Maintainerscaution

One registry maintainer is responsible for publishing. This is not inherently unsafe for a user-owned project, but it leaves a thin publishing base if that maintainer becomes unavailable.

Package scaffoldingcaution

The repository contains tests, while the published artifact omits tests and a changelog; those omissions are normal packaging practice. The package has no README, which modestly reduces consumer guidance.

Project backingcaution

The registry namespace and repository owner match a personal user account rather than an organization. That is consistent ownership, but it provides limited backing beyond one individual.

Release historycaution

Only two releases were published, both by March 2024, with no release in roughly two and a half years. This is meaningful evidence of limited maintenance for a package expected to evolve.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

ponponumi

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform