tomasvotruba/class-leak
This release appears healthy and suitable for dependency use: it is actively released, currently maintained, not deprecated or archived, has a stable major version, a matching repository with substantial source and test coverage, and no install-time lifecycle scripts or dangerous workflow patterns. The main risks are concentrated ownership, with all 15 commits in the last 3 months made by one maintainer, and limited security-process maturity because no security scanning or security policy was detected and workflow token permissions are not explicitly restricted. These concerns warrant monitoring but do not outweigh the package's strong release and repository evidence.
82%
Total Score
63
100
94
80
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so there is no organizational handoff buffer to offset the concentrated maintainer activity. The individual owner is nevertheless demonstrably active through recent commits and releases.
One contributor made 100% of the last 3 months' commits, creating a genuine single-maintainer continuity risk. The active release cadence and recent repository activity partly mitigate abandonment concerns but do not remove the bus-factor weakness.
The repository received 15 commits in the last 3 months, showing current activity. However, all activity came from one maintainer, so the maintenance evidence is tempered by concentration risk.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a security-process gap, though it is not by itself evidence that the package is unsafe or unmaintained.
No repository security policy was found. This reduces vulnerability-reporting transparency, but it is a process gap rather than evidence of abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/utils Version ^4.1 | — | — |
symfony/finder Version ^7.4|^8.0 | — | — |
entropy/entropy Version ^0.4.6 | — | — |
nikic/php-parser Version ^5.7 | — | — |
webmozart/assert Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.