Package Health

tmajne/silex-cart

Tests, a readable README, and a declared MIT license make the package easier to inspect and adopt. Its tiny audience and absent security policy provide little additional confidence for long-term use.

Latest v0.6PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This is the package's only release, published about 9 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with its last push being about 9 years ago. No newer maintenance activity offsets this concern.

Repo package mentioncaution

The repository name matches the package name, which supports the repository link. The package name is not mentioned in the README, a minor transparency concern for confirming ownership.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little community support for an otherwise inactive project.

Security policycaution

The repository has no security policy. This does not prove a security problem, but it reduces transparency and gives maintainers no documented channel for reporting vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tomasz Tomczyk

Direct Dependencies

DependencyLast ReleaseScore
filp/whoops
Version ^2.1
—
—
silex/silex
Version ~2.0
—
—
tmajne/cart
Version ^0.5
—
—
symfony/css-selector
Version ^3.1
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform