Package Health

smallerid/skeleton

The small project is easy to inspect and has a clear README and build setup. However, it has had no releases or commits for about three years and seven months, and the license terms need clarification before adoption.

Latest v1.0.4PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Licensecaution

The manifest declares the package proprietary while an MIT license file is present in both the artifact and repository. The conflicting signals create legal uncertainty despite the clearly identified MIT text.

Release historycaution

The five releases were published within a short period ending in February 2023, with no releases in the last 12 months. This indicates a long-standing maintenance gap, though a small skeleton project may require few updates.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with no observable development since February 2023. That materially increases abandonment risk.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a modest transparency gap for a project intended to seed applications.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

purwanto

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform