potfur/statemachine
It has a clear MIT license, a substantial test suite, and only one runtime dependency. The repository is not archived, but its small user base and lack of a security policy add little reassurance for a new dependency.
43%
Total Score
0
100
63
50
Health Score Breakdown
The package has had only two releases, with none in the last 12 months; the latest release was about 10 years ago. This is strong evidence that maintenance has effectively stopped.
The repository recorded no commits or active maintainers in the last 3 months, and its last push was about 9 years ago. The long-running inactivity materially increases abandonment risk.
Composer build tooling is present, but no security-scanning tools were detected. That is a modest hygiene gap rather than evidence of an unsafe release by itself.
The repository has no security policy, leaving maintainers' vulnerability-reporting process unclear. This adds a transparency concern, though it is secondary to the stale maintenance signals.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michal Wachowski |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.