quantaforge/pipeline
The package is small and straightforward, with three runtime dependencies and no install-time scripts. Its license metadata conflicts with the MIT license file, adding uncertainty for adopters.
38%
Total Score
50
64
83
Health Score Breakdown
This is the only release, published nearly three years ago, with no releases in the past 12 months. That leaves maintenance and compatibility largely unproven.
The repository has recorded no commits and no active maintainers in the past three months; combined with the old sole release, this indicates likely abandonment.
The manifest declares the package proprietary, while LICENSE.md and the repository license file identify MIT. The conflicting declarations create avoidable licensing uncertainty despite the available license file.
The artifact has no README, tests, or changelog, and the repository also reports none. Missing tests and changelogs are normal for published artifacts, but the absent README weakens consumer transparency for a library.
Composer is used for builds, which is appropriate, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tomáš Selič (Smisch-DEV) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 quantaforge/support Version ^1.0.0 | — | — |
quantaforge/contracts Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.