techart/tao
Tests, a changelog, and an Apache-2.0 declaration improve transparency. The repository has had no commits in three months and does not match the package name, leaving maintenance and source ownership concerns.
61%
Total Score
50
81
83
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the frequent registry releases and raises concern that releases may not reflect active source maintenance.
The repository name does not match the package name, and no README mention was found. The linked source may not clearly belong to this package, which weakens provenance confidence.
The repository has 3 stars, 0 forks, and 1 watcher. Low visibility is supporting caution rather than proof of poor quality, especially given the active release history.
Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest repository hygiene gap.
The linked repository has no security policy. This weakens vulnerability-reporting transparency, though it does not by itself show abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Techart |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 curl/curl Version ~1.7 | — | — |
laravel/ui Version ^4.0 | — | — |
ramsey/uuid Version ^4.1 | — | — |
doctrine/dbal Version ^4.0 | — | — |
mews/purifier Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.