sterc/skeleton
The README explains the intended Composer workflow, and MIT licensing is declared. Installation relies on a post-create script, while the package’s source and ongoing maintenance could not be verified.
45%
Total Score
100
80
50
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was nearly three years ago despite being about three years old. This is strong evidence of stalled maintenance.
The package runs a post-create-project command that copies files during installation. This appears central to the documented installer workflow, but install-time execution adds supply-chain exposure and warrants caution.
The artifact contains only README.md, composer.json, and post-create-project.sh. This is consistent with an installer that obtains the main project content from sterc/skeleton-base, but it leaves little local material for review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sterc/skeleton-base Version ^4.0 | — | — |
sterc/coding-standards Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.