softinvest/dto
Usable with caveats: the package is small, licensed, and clearly tied to its source repository, but it has had no release or repository update since December 2022. Its zero-star repository and lack of security policy add limited transparency concerns.
55%
Total Score
75
100
78
90
Health Score Breakdown
One registry account has publish access. This is a limited maintainer base, but it matches the user-owned repository and is not independently treated as a severe concern.
Only two releases were published, with the latest on December 3, 2022 and none in the last 12 months. This long period without releases materially raises abandonment risk for a dependency.
The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but these counters provide little supporting evidence of community maturity.
Composer is used as a build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk for this small package.
The repository is not archived, which avoids a severe abandonment signal, but its last push was on December 3, 2022 and provides no evidence of ongoing maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 softinvest |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.