Package Health

thelia/cheque-module

Healthy and suitable to use, with a few transparency and maintenance caveats. It has a long release history, five releases in the last year, active repository updates, tests, and organization backing, but recent commits come from one contributor and the repository does not clearly identify the package in its README.

Latest 3.0.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Repo bus factorcaution

One contributor made all five commits in the last three months, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo commit activitycaution

Five commits were made in the last three months, so maintenance is active, although all were made by one maintainer.

Repo package mentioncaution

The repository name does not match the package name, and no README package mention was collected. Although a name mismatch can be normal for a module repository, the absence of a confirming mention creates some uncertainty about package-to-repository alignment.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a modest transparency gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance unclear. This is a transparency weakness, partially offset by the package's active release and repository activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
thelia/installer
Version ^1.6

Weekly Downloads

Info

Last Published
5 days ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform