timatanga/workflow
Clear documentation, tests, changelog, and licensing make the package easier to evaluate and integrate. Its lightweight dependency profile and lack of install scripts help, but there is no security policy or automated security scanning.
40%
Total Score
50
100
57
75
Health Score Breakdown
This is the package's only release, published in September 2021, and there have been no releases in nearly five years. That is strong evidence of abandonment for a dependency receiving ongoing maintenance.
The repository is not archived, but it was last pushed in September 2021, matching the lone release and showing no recent maintenance activity. The non-archived status provides little practical compensation.
Only one account has registry publishing access. Because the project is owned by a user rather than an organization, this leaves limited visible publishing redundancy and compounds the maintenance concern.
Composer is used as the build tool, but no security-scanning tooling is present. That leaves a modest assurance gap, though it is less serious than the long-term lack of maintenance.
The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mark Fluehmann |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 timatanga/events Version dev-master | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.