Package Health

professional-wiki/modern-timeline

The package includes clear documentation, tests, a license, and an active organization-backed repository. Recent repository work is limited to two commits from one contributor, and all 16 workflow actions are unpinned.

Latest 4.0.0PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated maintenance dependency. Organization ownership partly offsets handoff risk, but no second recent contributor is shown.

Repo commit activitycaution

Only two commits were made in the last three months by one active maintainer. This is genuine recent activity, but the low volume weakens confidence in ongoing maintenance.

Repo issue activitycaution

There are 10 open issues but no issues or pull requests were opened or closed in the last month, providing little evidence of active issue maintenance.

Repo toolingcaution

The project uses Make and Composer, which supports reproducible project workflows, but no security scanning tools were detected.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, script-injection, or high-confidence audit findings. However, all 16 action references are unpinned, which leaves workflow dependencies exposed to mutable upstream changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Professional Wiki
Jeroen De Dauw

Direct Dependencies

DependencyLast ReleaseScore
composer/installers
Version ^2|^1.0.1
param-processor/param-processor
Version ~1.10

Weekly Downloads

Info

Last Published
3 months ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform