truelist/truelist-php
The package has clear documentation, tests, MIT licensing, and organization backing. However, no commits in six months and unpinned workflow actions weaken confidence; pin this version while confirming ongoing maintenance.
58%
Total Score
50
100
79
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the past three months, with the last push about six months ago. For a package with only one release, this leaves ongoing maintenance unproven.
This is the only release, published about six months ago, so there is not enough release history to establish a reliable maintenance cadence. The project is still relatively young.
Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap rather than a standalone adoption blocker.
The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though it is not evidence of an active security problem.
v0.1.0 is not a stable major release, which signals an early API and potentially greater compatibility risk. It is not marked as a prerelease, so the concern is limited to maturity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.