sofa/hookable
The package is small, clearly documented, and its source layout matches the published artifact. Its workflow has no audit findings, but dependency references are not pinned and the repository lacks a security policy.
45%
Total Score
38
100
83
83
Health Score Breakdown
The package has 16 releases since November 2015, but its latest release was in December 2020 and it had no releases in the last 12 months. This long release gap is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in July 2023. This is strong evidence that active maintenance has stopped.
One registry account has publish access. That is a modest resilience concern for a user-owned project and is consistent with the single-contributor activity shown elsewhere.
The repository is owned by an individual user rather than an organization, so the single registry maintainer is not explained by organization-backed publishing capacity.
There are four open issues and three open pull requests, but no issues or pull requests were opened or merged in the last month. This supports the broader picture of limited current activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jarek Tkaczyk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/database Version >=5.4 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.