Package Health

putyourlightson/craft-leaf-categories

The package is small, clearly scoped, and easy to identify in its matching source repository. MIT licensing and a simple dependency profile help, but the lack of security tooling and policy leaves little evidence of ongoing project oversight.

Latest 1.0.1PackagistPackagist

55%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

Only two releases were published, both in April 2020, with no releases in the following six years. That is substantial evidence of inactivity, although a narrowly scoped plugin may require few changes once stable.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance concern rather than a severe risk.

Repository archivedcaution

The repository is not archived, which preserves a path for maintenance, but its last push was on April 24, 2020 and reinforces the long release gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a minor transparency gap for a package that integrates with a CMS.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
craftcms/cms
Version ^3.4.0

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform