tinymvc/orbit
The MIT license, tests, and substantial README improve transparency. Install-time scripts and no repository security tooling add modest operational risk.
68%
Total Score
83
100
94
50
Health Score Breakdown
The package runs post-create-project-cmd and post-root-package-install scripts, which increase install-time execution and operational risk compared with a package without lifecycle hooks.
All four recent commits came from one contributor, giving the project a high concentration risk and making continuity dependent on a single active maintainer.
Composer is used as a build tool, but no security-scanning tools were detected. The missing scanning layer is a modest transparency and maintenance-control gap.
The repository has no SECURITY.md or other security policy, leaving vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Shahin Moyshan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tinymvc/tinycore Version ^3.3 | — | — |
phpmailer/phpmailer Version ^7.0 | — | — |
tinymvc/inertia-php Version ^2.0 | — | — |
voku/portable-ascii Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 12 hours ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.