tigusigalpa/whale-alert-php
This is a usable but very young package with strong release and repository hygiene: it is MIT licensed, has complete README, changelog, tests, Composer scaffolding, security scanning, read-only workflow permissions, and no dangerous workflow patterns. It is not deprecated or archived, and the repository clearly matches the package. However, the package is only 50 days old, has just three releases, and repository activity over the last three months consists of one commit from a single contributor; the single registry maintainer and absence of a security policy also limit resilience and transparency. The package is reasonable to evaluate for adoption, but its short history and concentrated maintenance warrant monitoring and possibly pinning the dependency.
72%
Total Score
50
100
94
90
Health Score Breakdown
Only one account has registry publish access. Because the repository owner is a user rather than an organization, this represents a genuine continuity and publishing-capacity concern, although registry access alone does not establish actual maintenance activity.
The repository is owned by the individual user tigusigalpa rather than an organization, so there is no demonstrated organizational backing to compensate for the concentrated maintainer base.
The package is only 50 days old with three releases and a median release interval of about 25 days. This shows active initial publishing but provides limited evidence of long-term maintenance maturity.
One contributor made 100% of the single recent commit, leaving a very low observed contributor redundancy and increasing continuity risk for a user-owned project.
Only one commit was recorded in the last three months from one active maintainer. For a package this young, that is not proof of abandonment, but it is limited evidence of sustained maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Igor Sazonov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.15.2 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.