souplette/macaron
Consumer documentation is concise, and the package has no install-time scripts. The long release and commit gap means maintenance may have stopped; pin 0.6 only if you can accept that risk.
58%
Total Score
50
86
100
Health Score Breakdown
The latest release was more than 2 years ago, with no releases in the last 12 months. This is a meaningful maintenance concern despite a previously regular release interval.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the possibility that development has stopped.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned, reducing build reproducibility and supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ju1ius |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/clock Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
souplette/fusbup Version ^1.0 | — | — |
psr/clock-implementation Version * | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.