rossriley/boltcomposer-webroot
The small package has no declared or detected license and no security policy. Its install-time scripts and inactive repository provide limited assurance, although the repository is not archived and the package includes basic installation guidance.
38%
Total Score
0
100
71
67
Health Score Breakdown
Only one release exists, published about 12 years ago, with no releases in the last 12 months; this is strong evidence of abandonment risk for a package developers would depend on.
There were no commits and no active maintainers in the last three months, consistent with the long-stale release history and increasing abandonment risk.
The package has no declared license, no detected license, and no license file in the artifact or repository, leaving usage and redistribution rights unclear.
The package runs post-install and post-update scripts, creating execution during dependency operations; without further evidence of what they do, this is a modest transparency and supply-chain concern.
The repository uses Composer, which fits the package ecosystem, but it has no security-scanning tooling; this is a minor transparency gap for an otherwise very small project.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ross Riley |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 bolt/bolt Version dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.