snicco/signed-url-testing
The package is licensed, clearly documented, and tied to an organization-owned repository with a matching source project. Its prerelease status and inactive repository reduce confidence in long-term maintenance, while the workflow uses an unpinned action.
61%
Total Score
75
100
71
75
Health Score Breakdown
The package has 33 releases, but none in the last 12 months; its latest release was about two years ago. This indicates a substantial maintenance pause for a package still presented at a beta version.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the older last push, this is evidence of stalled maintenance rather than merely low popularity.
The repository uses Composer build tooling but reports no security scanning tools. For this small testing utility, the missing scanner is a hygiene gap rather than a severe dependency risk.
The linked repository is not archived, but it was last pushed about two years ago. The active repository status helps, though it does not offset the lack of recent activity.
The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's testing-focused scope limits the severity of that gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Calvin Alkan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpunit/phpunit Version ^9.5.13 | — | — |
snicco/signed-url Version ^2.0 | — | — |
snicco/testable-clock Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.