soderlind/content-poll
The release includes tests, a changelog, release notes, and no install-time scripts. Maintenance has paused for three months, while the license metadata conflicts with the detected artifact license and the repository has no security policy.
65%
Total Score
50
79
83
Health Score Breakdown
The package declares GPL-2.0-or-later and includes license files, but the detected artifact license is MIT, which creates an unresolved licensing inconsistency for consumers.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release history.
Composer is used for builds, but no security scanning tool is configured, leaving a modest repository hygiene gap.
The repository has no security policy, so its process for receiving and handling vulnerability reports is not documented.
Version 0.10.0 is not on a stable major version, so compatibility expectations are less mature than for a 1.x release; it is nevertheless not marked as a prerelease.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yahnis-elsts/plugin-update-checker Version ^5.6 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.