tacoberu/composer-assets
The package is small and clearly documented, with matching source, MIT licensing, and no install-time script. Its narrow scope and single runtime dependency reduce adoption risk, but ongoing compatibility work is uncertain.
45%
Total Score
33
100
78
88
Health Score Breakdown
The package has only 3 releases since July 2020 and none in the last 12 months; the latest release was in July 2022. This long release gap materially raises abandonment and compatibility risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the old last release, this is strong evidence that maintenance has stopped.
The package has one registry maintainer account. Because the repository is user-owned rather than organization-backed, this leaves a thin visible maintainer base and increases continuity risk.
The package and repository are owned by the same individual account, confirming a coherent source link but offering no organizational backing to offset the thin maintainer base.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible user base provides little reassurance if maintenance stops.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Takáč |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.