Package Health

tamayo/stretchy

The package includes tests, documentation, and an MIT license, with no install-time scripts or deprecation notice. Its lone release and inactive repository make long-term compatibility and support uncertain.

Latest 2.0.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This is the only release, published over 10 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk for a dependency.

Repo commit activitydanger

The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance.

Maintainerscaution

A single registry maintainer provides little publishing redundancy. The repository is user-owned rather than organization-backed, so there is no provided backing signal to compensate for that thin base.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest supply-chain hygiene gap, not evidence that the release is malicious.

Repository archivedcaution

The repository is not archived, which is a positive, but its last push was in August 2016 and does not offset the evidence of prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Erick Tamayo

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version 5.2.*
—
—
elasticsearch/elasticsearch
Version ~1.0
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform