spatial/core
The package includes tests, release notes, and a clear MIT declaration. Its single registry maintainer and lack of repository security scanning leave limited independent assurance.
82%
Total Score
67
88
83
Health Score Breakdown
The repository is owned by a user account rather than an organization, so the small maintainer base has no demonstrated organizational handoff capacity.
Two contributors are active, with the leading contributor responsible for about 54% of recent commits. That is somewhat concentrated but not a single-contributor project.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest gap in repository assurance.
The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.
The assessed version is a prerelease, but the package has a stable major version and the recent prerelease share is 35%, so this is a limited maturity concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kofi Owusu-Afriyie |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-di/php-di Version ^7.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
php-http/httplug Version 2.x-dev | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.