Package Health

tobento/app-media

App media support.

Latest 2.0.3PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Dependency profilecaution

The package declares 21 runtime dependencies, including many related Tobento components. This is a broad dependency surface for an application media package and modestly increases maintenance exposure.

Maintainerscaution

Only one registry account has publishing access. The linked source repository confirms the project identity, but the available evidence does not show a broader publishing base to provide redundancy.

Project backingcaution

The registry namespace and repository owner are aligned, and the repository owner is an individual account rather than an organization. This supports identity matching but does not provide organizational continuity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the latest release was recent enough to show ongoing delivery, this short-term inactivity lowers maintenance confidence.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of community adoption.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tobias Strub

Direct Dependencies

DependencyLast ReleaseScore
tobento/app
Version ^2.0
—
—
tobento/app-http
Version ^2.0
—
—
tobento/app-view
Version ^2.0
—
—
tobento/app-cache
Version ^2.0
—
—
tobento/app-event
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform