quidphp/front
It has a clear MIT license, tests, documentation, and a stable package layout. A single maintainer and no security tooling leave limited resilience.
55%
Total Score
50
88
50
Health Score Breakdown
Only one registry publishing maintainer is listed, leaving little visible publishing redundancy if that person becomes unavailable. The linked repository and package namespace do align, which provides some continuity.
The latest release was over four years ago, with no releases in the last 12 months and only three releases overall. This materially raises staleness risk for a package containing browser assets.
The repository had no commits from active maintainers in the three months before collection, despite a push in March 2025. That suggests current development activity is limited or intermittent.
Composer is used as a build tool, but no security scanning tools were detected. The absence of scanning reduces automated oversight of changes and dependencies.
The linked repository has no security policy, so there is no documented process for reporting and handling vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pierre-Philippe Emond |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.