Package Health

siriussupreme/sirius-translate

The MIT license and matching source repository provide clear provenance. Its extremely brief README and install-time scripts leave limited guidance and add avoidable maintenance friction.

Latest 1.0.0PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has had only one release, published in October 2017, with no releases in the last 12 months. That is strong evidence of abandonment for a library dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with the old release history, this indicates a substantial abandonment risk.

Lifecycle scriptscaution

The package declares eight install- and update-time Composer lifecycle scripts. Their presence increases installation complexity and warrants caution, although this signal alone does not show that the scripts are unsafe.

Package scaffoldingcaution

The package includes a README and GitHub release notes for this version, but the README is only 18 characters long. Missing tests and changelog files are normal for a published artifact and are not treated as gaps.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. This is a modest transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

siriusSupreme

Direct Dependencies

DependencyLast ReleaseScore
siriussupreme/sirius-support
Version ^1.0
—
—
siriussupreme/sirius-filesystem
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform