tm/gpg-verifier
Documentation, tests, and MIT licensing are present, and the dependency footprint is small. However, maintenance stopped about 10 years ago, leaving this release without an active path for fixes or updates.
18%
Total Score
0
100
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because future maintenance is not expected.
The package has only two releases, both published in August 2016, with no releases in the last 12 months. This indicates roughly 10 years without a new release.
There were no commits and no active maintainers in the last 3 months, consistent with the archived repository and long release gap.
The linked repository is archived, and its last push was about 7 years ago. Archived source confirms that active fixes and updates are unlikely.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a minor hygiene gap, while the larger concern remains the inactive project.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tommy Muehle |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.