victormgomes/rest-messages
The package has clear documentation, MIT licensing, repository tests, and a source repository that matches its package identity. Its single-user ownership and lack of a security policy reduce resilience for long-term adoption.
58%
Total Score
50
83
50
Health Score Breakdown
The package uses a post-autoload-dump install-time script, which adds execution during dependency installation and warrants more scrutiny than a package without lifecycle hooks.
One registry maintainer is consistent with a small, user-owned project, but it leaves limited visible publishing redundancy if that maintainer becomes unavailable.
Four releases in 148 days show an actively launched project, but the short history provides limited evidence of maturity or durable maintenance.
The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance warning for a package only recently released.
The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Victor M. Gomes |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^11.0||^12.0||^13.0 | — | — |
doctrine/inflector Version ^2.0 | — | — |
illuminate/console Version ^11.0||^12.0||^13.0 | — | — |
illuminate/routing Version ^11.0||^12.0||^13.0 | — | — |
illuminate/support Version ^11.0||^12.0||^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.