Package Health

thelia/yo

The README and release notes explain installation and the latest change, while the stable version and small dependency footprint are reassuring. Long-term ownership and legal reuse remain unclear.

Latest 1.0.2PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has had only three releases, with the latest published in April 2015 and none in the last 12 months. This strongly raises abandonment risk, although the release cadence was initially regular.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in April 2015. The repository is not archived, but that does not offset the prolonged inactivity.

Licensecaution

No declared license, license file, or detected license was found in the package or repository. This creates a real legal and transparency concern for adoption.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 4 watchers, providing little supporting evidence of broad review or community continuity. Popularity is only supporting evidence, so this is a modest concern rather than a verdict.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For an old, inactive package this leaves less evidence of ongoing maintenance hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
thelia/installer
Version ~1.1
—
—

Weekly Downloads

Info

Last Published
11 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform