Package Health

victoire/cover-widget

The package includes a README, tests, and a stable release, while its organization-owned repository remains available. It lacks security scanning and shows little current project activity, so it should not be newly adopted.

Latest 2.0.3PackagistPackagist

18%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement package supplied. Package-level deprecation is a severe warning against taking a new dependency.

Release historydanger

The latest release was published in April 2018, with no releases in the last 12 months as of the 2026 assessment. About eight years without a release indicates substantial abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. The non-archived repository does not compensate for the lack of observed maintenance.

Repo issue activitycaution

There are four open issues but no new or closed issues, pull requests, or merged pull requests in the last month. This suggests unresolved maintenance rather than active project support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is a modest positive, while the missing security tooling is a small hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leny Bernard
Paul Andrieux

Direct Dependencies

DependencyLast ReleaseScore
victoire/victoire
Version ~2.3 | ~3.0
—
—
victoire/image-widget
Version ~2.0
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform