vbpupil/product
Tests, documentation, licensing, and a clean dependency/install profile reduce adoption friction. The source is small and lightly used, with no security policy, so pinning this version is prudent.
58%
Total Score
25
100
78
88
Health Score Breakdown
The package has had no releases in more than five years, despite 29 releases overall. This is strong evidence of a stale release line and raises maintenance risk.
There were no commits and no active maintainers in the last three months. Combined with the old latest registry release, this points to limited ongoing maintenance capacity.
The package and repository are owned by the same individual account, with no organization backing shown. That leaves a relatively narrow visible ownership base, although it is not by itself evidence of abandonment.
The repository has zero stars and one fork, so there is little visible community adoption or review. Popularity is supporting evidence only, but this provides no compensating maturity signal.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dean Haines |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 myclabs/php-enum Version ^1.7 | — | — |
vbpupil/collection Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.