Package Health

sweetchuck/git-hooks

Usable with caveats: the package is actively released, has tests, documentation, and a matching source repository, but no commits were recorded in the last three months. Its Composer install and update hooks also change Git hook configuration, so review that behavior before adopting it.

Latest v3.0.0PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which is central to deploying its Git hooks but gives installation-time code execution and repository configuration changes extra importance.

Project backingcaution

The registry namespace and repository owner match, but the repository is user-owned rather than organization-backed, so the project has limited visible institutional support.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months, a meaningful maintenance concern, although a recent registry release and recent repository push provide some compensating evidence.

Repo popularitycaution

The repository has only 2 stars and no forks, indicating a small user base; this is supporting caution but not decisive because the project shows documentation, tests, and recent release activity.

Repo toolingcaution

The repository uses Composer and Robo build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andor

Direct Dependencies

DependencyLast ReleaseScore
symfony/filesystem
Version ^7.0 || ^8.0

Weekly Downloads

Info

Last Published
8 months ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform