Package Health

softc/evotor-mobile-cashier

Tests, a clear README, and matching Apache-2.0 licensing support adoption. The repository lacks security scanning and uses unpinned workflow actions; pin this version if its API meets your needs.

Latest v1.0.0PackagistPackagist

66%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has six releases since November 2021, but none in the last 12 months and the latest release was in May 2024. This materially raises maintenance and abandonment risk despite a previously regular release interval.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Combined with the old registry release, this weakens evidence of ongoing maintenance.

Repo toolingcaution

The repository uses Composer and Make, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers or audit findings, but both workflow action references are unpinned. That leaves avoidable build-integrity exposure while remaining a hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aleksandr Soloshenko

Direct Dependencies

DependencyLast ReleaseScore
mpetrovich/dash
Version ^3.1
php-http/httplug
Version ^2.0
psr/http-message
Version ^1.0
php-http/discovery
Version ^1.0
php-http/message-factory
Version ^1.0

Weekly Downloads

Info

Last Published
2 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform