stolt/lean-package-validator-mcp
The MIT license, repository tests, changelog, and matching source repository improve transparency. Its four releases arrived within a day, so maintenance and compatibility are not yet proven; CI also uses three unpinned actions.
67%
Total Score
50
70
50
Health Score Breakdown
The package is less than one day old and has four releases with a median interval of about 48 minutes. This shows active initial publishing but provides almost no long-term maintenance evidence.
The repository shows zero commits and zero active maintainers over the last three months, but the package itself is newly published, so this is limited evidence of abandonment rather than proof of it.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users are given no documented process for reporting or handling vulnerabilities.
Version v0.1.3 is not marked as a prerelease, but the 0.x major version indicates the API may still change before reaching a stable major release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Raphael Stolt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-mcp/server Version ^3.3 | — | — |
symfony/process Version ^8.1 | — | — |
stolt/lean-package-validator Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 hours ago
- Created
- 1 day ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.