vankosoft/application-project
The project includes tests, a changelog, a clear README, and a matching MIT license. Its single-contributor base and absent security policy leave less redundancy and disclosure guidance than mature dependencies.
68%
Total Score
67
100
67
Health Score Breakdown
The package runs post-install and post-update Composer scripts, which add installation-time behavior that consumers must trust and understand. This is a modest supply-chain and operational concern, not a severe risk by itself.
The repository is owned by an individual account rather than an organization, so there is no provided organizational backing to offset the concentrated contributor base.
All 6 recent commits came from one contributor, giving the project a concentrated maintenance base. This increases continuity risk despite the recent activity.
The repository has no security policy, so it provides no documented vulnerability-reporting process. This is a transparency gap for a project with substantial application functionality.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ivan I. Atanasov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/flex Version ^1.17|^2 | — | — |
symfony/dotenv Version 7.4.* | — | — |
symfony/runtime Version 7.4.* | — | — |
symfony/notifier Version 7.4.* | — | — |
vankosoft/application Version 1.14.* | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.