sastrawi/trka
Its four runtime dependencies are a manageable integration surface, but the package has only one listed maintainer and no recent release activity. Avoid adopting it for new projects unless you can independently maintain the code.
12%
Total Score
50
100
17
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package listed. This is a severe warning against taking a new dependency on it.
The package has had no release in nearly 12 years, with only two releases ever and none in the last 12 months. This strongly indicates abandonment risk for a dependency.
Only one account has registry publish access, leaving little visible maintainer redundancy. Combined with the lack of recent releases, this increases the risk that issues will remain unattended.
The latest release is v0.2.0 and is not marked prerelease, but its unfinished 0.x version provides little reassurance alongside the long period without releases.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andy Librian |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sastrawi/string-span Version ~1 | — | — |
zendframework/zend-uri Version ~2 | — | — |
zendframework/zend-validator Version ~2 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.