Package Health

studoo/ecole-directe-api

The package has a useful README, tests, changelog, MIT licensing, and an organization-backed repository. Its workflows use six unpinned actions, and the audit was incomplete for one file, adding a smaller maintenance concern.

Latest v0.1.5PackagistPackagist

56%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has seven releases, but none in the last 12 months and the latest release was published over three years ago. This is strong evidence of stalled maintenance for a library that may need compatibility fixes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. No newer activity is provided to offset the abandonment concern.

Workflow auditcaution

All six analyzed action references are unpinned, and one workflow file failed auditing, so the workflow review is incomplete. However, there are no reported dangerous triggers, untrusted checkouts, script injections, or audit findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Benoit Foujols
Studoo Community

Direct Dependencies

DependencyLast ReleaseScore
symfony/dotenv
Version ^6.2
—
—
guzzlehttp/guzzle
Version ^7.5
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform