Package Health

skeeks/cms-assets-auto-compress

The package is licensed, documented, and has only one runtime dependency. Organization backing offsets its low popularity and single recent contributor, though no security policy or scanning is visible.

Latest 1.6.3.3PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo bus factorcaution

One contributor made all commits in the last three months, giving the repository a concentrated bus factor. Organization ownership partly compensates because maintenance can be handed off.

Repo commit activitycaution

There was one commit from one active maintainer in the last three months. Recent activity is positive, but the low volume provides only modest evidence of maintenance capacity.

Repo popularitycaution

The repository has one star, zero forks, and one watcher. This shows limited adoption, but popularity is supporting evidence and does not outweigh the maintenance signals.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is present. The missing scanner is a hygiene gap rather than evidence that the release is unsafe or abandoned.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, though it is not by itself evidence of poor maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Semenov Alexander

Direct Dependencies

DependencyLast ReleaseScore
skeeks/yii2-assets-auto-compress
Version ~1.4.0 || dev-master@dev
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform