Package Health

tapiruslab/tapirusdb

The package includes substantial documentation, tests, a changelog, and a security policy. Its license metadata conflicts with the Apache-2.0 license file, while the project has no release or activity history beyond its launch and all five workflow actions are unpinned.

Latest v1.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Licensecaution

The manifest declares BUSL-1.1, but the artifact and repository license file are detected as Apache-2.0. The release is licensed, but the mismatch creates meaningful legal and transparency uncertainty.

Release historycaution

This is the first recorded release, published 0 days ago, so there is no track record for maintenance, compatibility, or release stability.

Repo issue activitycaution

There have been no issues or pull requests opened or merged in the last month. Given the repository's age of 0 days, this is limited evidence rather than proof of neglect.

Repo popularitycaution

The repository has 0 stars, forks, and watchers. This is weak supporting evidence, though the package is newly released and popularity alone is not decisive.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The separate security policy and workflow review provide some compensation, but automated security coverage is still absent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ahmad Faiz

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
6 hours ago
Created
6 hours ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform