tomzx/ditto
The repository still has tests, the package has a clear MIT license, and its source remains available. However, the last release was about 10 years ago and development has been inactive for about 5 years, creating substantial abandonment and compatibility risk.
42%
Total Score
0
100
75
83
Health Score Breakdown
The latest release was published in March 2016, with no releases in the last 12 months. This long release gap is a substantial maintenance and compatibility concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push being about 5 years ago. That leaves little evidence of current maintenance capacity.
The repository has only 2 stars, 1 fork, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these very low figures provide little indication of a broad support community.
Composer is used as a build tool, but no security-scanning tooling was detected. The missing scanner is a minor transparency gap, not a standalone adoption blocker for this small package.
The repository has no security policy. For a small, inactive package this reduces clarity about vulnerability reporting and response, adding to the broader maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Rochette |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/container Version ~4.2|~5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.