transave/scola-cv-management
The package is clearly licensed and includes tests, a changelog, and a usable README. Its small maintainer base and missing security policy add concern, while the long period without releases or repository commits makes continued support uncertain.
38%
Total Score
25
81
50
Health Score Breakdown
The package has had 3 releases, but none in the last 12 months; its latest release was nearly three years ago. This is strong evidence of abandonment risk for a framework integration package.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no recent maintenance capacity.
Only one registry maintainer is listed. The linked repository is user-owned rather than organization-owned, so there is little visible redundancy if that maintainer stops supporting the package.
Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap, especially for a package handling authentication and user data.
The repository has no formal security policy. The README provides an email contact, but that does not replace documented security reporting and response guidance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lubem Tser |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version 7.* || ^8.15 || 9.0 - 9.34 || ^9.36 || ^10.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.