py/bridge
Healthy and suitable to try, with caveats. It has recent releases, active development, clear licensing, and extensive tests, but all recent commits come from one contributor and the repository lacks security scanning and a security policy.
78%
Total Score
83
100
83
80
Health Score Breakdown
One contributor made 100% of the 19 recent commits, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository has only 6 stars, no forks, and no watchers. This is weak supporting evidence, but popularity alone does not outweigh the observed release and maintenance activity.
The repository uses Composer build tooling, but no security scanning tools are configured. The missing scanning is a transparency gap rather than evidence of abandonment.
No security policy is present, leaving vulnerability-reporting and response practices undocumented.
The only workflow lacks top-level token permissions. No write permissions were detected, but explicit least-privilege settings would provide stronger CI transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 textalk/websocket Version ^1.6 | — | — |
nette/php-generator Version ^4.2 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.