tigron/skeleton-i18n appears to be a healthy, actively maintained Composer dependency with a long release history, regular recent releases, stable versions, an unarchived matching repository, and current activity from two contributors. The organization-backed project and balanced recent contributor activity reduce abandonment and bus-factor concerns. The main reservations are the absence of tests, a changelog, a security policy, and automated security scanning, alongside very limited repository popularity; these are transparency and process gaps, but they do not outweigh the package's sustained release and repository activity.
82%
Total Score
100
100
83
90
A substantive README is present, but neither the artifact nor repository contains tests or a changelog. The GitHub Releases integration provides some release transparency, but the missing validation and change documentation remain hygiene gaps.
The repository has zero stars, three forks, and four watchers, indicating limited external adoption. Popularity is supporting evidence rather than a verdict, so this is only a modest concern given the stronger maintenance signals.
Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a process gap, though it is not evidence that the package is malicious.
No SECURITY.md or equivalent security policy is present, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tigron/skeleton-core Version >=3 | — | — |
tigron/skeleton-object Version * | — | — |
tigron/skeleton-migrate Version * | — | — |
tigron/skeleton-database Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.