Package Health

totza2010/thailand-address-typeahead

The package has a clear README, an explicit license file, and only one runtime dependency. Maintenance appears dormant, and the repository does not clearly identify the package, so pin this exact release rather than relying on future updates.

Latest 1.0.1PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historycaution

This is a one-release package, first published 979 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the last push occurring in January 2024. This is a meaningful abandonment concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, making package ownership less clear. The matching repository owner and package tree provide only partial context, so this remains a caution.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the inactivity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
corejavascript/typeahead.js
Version 1.*

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform