setasign/setapdf-signer-addon-swisscomais
The package is clearly licensed, documented, and tied to an organization-backed repository with a matching source tree. It lacks security scanning and a security policy, while recent repository activity has not translated into a release in over a year.
68%
Total Score
75
100
88
75
Health Score Breakdown
The package has existed since 2015 with 11 releases, but its latest release was over a year ago and it had no releases in the last 12 months. This indicates a slow maintenance cadence, though the long history provides some maturity.
The repository recorded no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the recent push reported by repository_archived partly offsets the concern.
The repository uses Composer, but no security scanning tools were detected. For a package handling signing-service integrations, this is a modest transparency and maintenance gap.
No security policy was found in the repository. This limits disclosure guidance for a package involved in document signing, but it is not by itself evidence of abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Setasign GmbH & Co. KG |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
setasign/setapdf-signer Version ^2.44 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.