Package Health

progrupa/poll-bundle

The package has a very short README and no repository security policy. Its stable version, minimal dependency surface, and organization-owned repository provide some supporting context, but the project remains young.

Latest v1.1.1PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Licensecaution

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That creates a real adoption and redistribution concern for an open-source dependency.

Package scaffoldingcaution

A README is present, which helps consumers, but it contains only 12 characters. The absent tests and changelog are normal for a published package and are not treated as gaps.

Release historycaution

All three releases were published within roughly 1.4 hours, and the latest release is 142 days old. This shows initial release activity but no sustained cadence afterward.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Because the project is only 142 days old, this indicates limited recent maintenance rather than long-term abandonment, but it still lowers confidence.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. Although the owner matches the registry namespace, the link between this artifact and the repository is not clearly documented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
4 months ago
Created
4 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform