stougeiro/session-contract
Usable with caveats: the package is clearly licensed, small in scope, actively published, and backed by a matching repository. It is only 14 days old, has one contributor, and lacks security scanning and a security policy, so its long-term maintenance is not yet proven.
68%
Total Score
67
100
88
88
Health Score Breakdown
The repository is owned by a personal user account rather than an organization, so the single-contributor concentration has no provided organizational backing to offset it.
The package is very new at 14 days old, with four releases and a median interval of about 22 hours, showing active initial development but too little history to establish durability.
All five recent commits came from one contributor, leaving maintenance dependent on a single individual with no demonstrated handoff capacity.
Composer is used as the build tool, but no security scanning tools were detected; that is a transparency and maintenance gap for supply-chain hygiene.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 stougeiro |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 19 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.