Package Health

quantaforge/validation

The repository is organized and correctly linked, with Composer packaging and no install-time scripts. Its single release, no commits for nearly three years, missing README, and absent security tooling leave limited evidence of ongoing support.

Latest v1.0.0PackagistPackagist

44%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This package has had only one release, published nearly three years ago, with no releases in the last 12 months. That is substantial evidence of an unmaintained dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Licensecaution

A license file is present and recognized as MIT, but the manifest declares the package proprietary. That mismatch creates avoidable uncertainty about the release's licensing terms.

Package scaffoldingcaution

The package has no README, which is a meaningful transparency and integration gap for a validation library. Missing tests and changelog are normal for a published artifact and do not add concern here.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance concern rather than evidence of unsafe behavior.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tomáš Selič (Smisch-DEV)

Direct Dependencies

DependencyLast ReleaseScore
brick/math
Version ^0.9.3|^0.10.2|^0.11
—
—
symfony/mime
Version ^6.2
—
—
quantaforge/support
Version ^1.0.0
—
—
quantaforge/container
Version ^1.0.0
—
—
quantaforge/contracts
Version ^1.0.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform