vlucas/valitron
The package is licensed, dependency-light, well documented, and supported by repository tests and release notes. Unpinned workflow actions, no security policy, and a single registry maintainer reduce operational resilience.
55%
Total Score
50
100
89
75
Health Score Breakdown
Only one account has registry publish access. Because the repository is user-owned, this is not inherently abnormal, but it leaves limited publishing redundancy alongside the weak recent activity.
The package has 31 releases since February 2013, but none in nearly four years; this indicates materially slowed maintenance despite its established history.
The repository had zero commits and zero active maintainers in the last three months. This is a meaningful abandonment concern, even though the repository is not archived.
There were no new or closed issues and no merged pull requests in the last month, consistent with a project receiving little current maintenance.
Composer build tooling is present, but no security scanning tool was detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vance Lucas |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.