Package Health

prateekbhujel/prototype-dom

This is a promising but very new package: it has a clear MIT license, a matching repository with substantial documentation, source files, CI tooling, and a comprehensive repository test suite, while requiring no runtime Composer packages beyond PHP and ext-dom. However, it has only one release and is only 0 days old, with no observed commit activity during the preceding 3 months, no security policy, no security scanning, and an Actions workflow without explicitly declared top-level permissions. These gaps do not indicate that the package is unsafe, but they make long-term maintenance and security maturity unproven; adoption is reasonable for evaluation or controlled use, with normal dependency monitoring.

Latest v0.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Maintainerscaution

There is one registry maintainer. Because the linked repository is owned by the corresponding individual project owner, the small publishing base is consistent with a personal open-source project, but it still leaves limited apparent redundancy.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing or maintainer redundancy.

Release historycaution

This is the first and only release, published 0 days ago, so there is no demonstrated release cadence or track record yet.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers during the preceding 3 months. The package's 0-day age partly explains this lack of history, but maintenance capacity remains unproven.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is consistent with a package released 0 days ago and is weak evidence about health, but it provides no external adoption signal yet.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pratik Bhujel

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
13 days ago
Created
13 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform