ron-maxweb/pwned-passwords
It has a clear MIT license, tests, a README, and a matching source repository. The long release gap and package-level abandonment make this release a poor default dependency.
35%
Total Score
50
71
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with mxrxdxn/pwned-passwords listed as the replacement. This is a major adoption and maintenance warning even though the repository itself is not archived.
The package has six releases since February 2018 but none in the last 12 months; its latest registry release was in August 2021. That long gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. This supports the concern that the published package is not being actively maintained.
The repository has no security policy. For a library that handles password-breach queries, this is a modest transparency gap, though it is less significant than the abandonment and release-age concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ron Marsden |
| Saif Eddin Gmati |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.3 | ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.