Package Health

spiral/core

It has a long release history, a current stable version, repository tests, security scanning, and a clear MIT license. Recent work is concentrated in one contributor, while both workflow actions are unpinned and no security policy is present.

Latest 3.17.2PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the last three months' commits. Organization backing provides some handoff capacity, but the observed recent activity still shows a concentrated maintenance path.

Repo commit activitycaution

The repository recorded 10 commits in the last 3 months, showing recent activity. However, only one active maintainer contributed during that period, limiting resilience.

Security policycaution

No repository security policy was found. This is a transparency and response-process gap, though it is less serious than evidence of abandoned maintenance.

Workflow auditcaution

Both workflows were analyzed successfully and had no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of the two action references are unpinned, leaving a workflow reproducibility gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Anton Titov (wolfy-j)
Pavel Butchnev (butschster)
Aleksei Gagarin (roxblnfk)
Maksim Smakouz (msmakouz)

Direct Dependencies

DependencyLast ReleaseScore
psr/container
Version ^1.1|^2.0
—
—
spiral/security
Version ^3.17.2
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform