sagor/github-updater
This release is usable but carries meaningful small-project maintenance risk. It has a valid MIT declaration, tests in both the artifact and repository, a stable non-prerelease version, no deprecation status, no install-time lifecycle scripts, and a repository that matches and documents the package. However, recent activity is limited to 2 commits over 3 months from one contributor, with all recent commits concentrated in that contributor, while the repository has no security policy or security scanning and has negligible adoption signals. The package is therefore reasonably transparent and currently maintained, but dependence should account for single-maintainer and limited-process risk.
68%
Total Score
50
100
89
90
Health Score Breakdown
Only one account has registry publish access. Because the repository owner is an individual rather than an organization, this represents a genuine continuity risk, though access records do not by themselves establish maintenance activity.
The linked repository is owned by a User account rather than an organization, so there is no organizational backing to compensate for the concentrated maintainer and commit activity.
One contributor made 100% of the 2 commits in the last 3 months. With individual ownership shown by project_backing, this concentration creates a meaningful bus-factor and continuity concern.
Only 2 commits were recorded over the last 3 months, all from one active maintainer. Recent work exists, but the low volume indicates limited maintenance capacity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently unhealthy, but it provides little evidence of an active user or review community.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Md Sagor Hossain |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ~3.4 || ^4.4 || ^5.0 || ^6.0 || ^7.0 || ^8.0 | — | — |
illuminate/support Version ^5.5 || ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.