Package Health

supermetrolog/synchronizer-local-to-ftp-builder

Risky to adopt without taking on maintenance risk. The package has had no release or recent repository activity since January 2023, and it lacks a README, leaving its integration and future support uncertain; tests and a stable MIT declaration provide some reassurance.

Latest v1.1.0PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Release historydanger

Only two releases were published, with none in the last 12 months; the latest release was about 3 years and 8 months ago. This is strong evidence of an aging and potentially abandoned dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 3 years and 8 months since the latest release. This materially increases abandonment risk.

Dependency profilecaution

The package has five runtime dependencies, including several related synchronizer components. This is a meaningful dependency surface but appears consistent with a builder package rather than an inherently unhealthy profile.

Maintainerscaution

A single registry maintainer account publishes the package. This is a thin publishing base, although the repository is also owned by the same account, so it does not indicate an ownership mismatch.

Package scaffoldingcaution

The artifact includes tests and the repository has tests, which is a positive quality signal. However, the package has no README, making it harder for consumers to understand and integrate this library; the absent changelog is not a concern for the published artifact.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

supermetrolog

Direct Dependencies

DependencyLast ReleaseScore
supermetrolog/synchronizer
Version ^2.0
supermetrolog/synchronizer-already-sync-repo
Version ^2.0
supermetrolog/synchronizer-filesystem-source-repo
Version ^2.3
supermetrolog/synchronizer-filesystem-ftp-target-repo
Version ^1.0

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform