rabbitcms/carrot
The package has an empty README and no repository security policy, which make adoption and disclosure harder. Its organization-owned backing is a modest positive, but it does not offset the age and identity concerns.
45%
Total Score
75
100
57
75
Health Score Breakdown
The package has had no registry release in more than 5 years, despite 80 historical releases; that long gap is a substantial maintenance concern.
The linked repository is named dt-kt/library rather than rabbitcms/carrot, and no README package mention was available, so ownership of this package is not clearly established.
The artifact includes a README entry, but it is empty and the repository has no tests or changelog. Missing tests and changelog are normal packaging practice, while the empty consumer documentation is a minor adoption gap.
The repository recorded zero commits and zero active maintainers in the last 3 months. Although it was pushed recently, the observed lack of commit activity provides little evidence of ongoing maintenance.
The linked repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kulyk Dmytro |
| Dimon Zhurakovskiy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^5.2.0 | ^6.0 | ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.