webit/shipment
Tests, a README, and matching MIT licensing make the package easier to evaluate and adopt. The project has little visible activity or security process, so pinning this version carries maintenance risk.
57%
Total Score
50
100
81
75
Health Score Breakdown
Only one registry account has publish access, leaving a thin publishing base; the individually owned repository provides no organizational backing to offset that concern.
The latest release was published on March 9, 2021, with no releases in the following 12 months; this is a substantial maintenance concern despite seven releases overall.
The repository has 1 star, 0 forks, and 1 watcher, indicating a very small visible project footprint; popularity is supporting evidence rather than a verdict.
Composer is used for builds, but no security-scanning tools are configured, leaving a security-process gap in a project with otherwise limited recent activity.
The repository has no SECURITY.md or other security policy, reducing transparency for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Bojdo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/cache Version ^1.2 | — | — |
webit/php-tools Version dev-master | — | — |
webit/addressing Version dev-master | — | — |
doctrine/collections Version ^1.2 | — | — |
symfony/event-dispatcher Version ^2.3|^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.