withcandour/statamic-webpack
Consumers have limited documentation and little evidence of ongoing care. The package is small and has a release note, but its long period without updates makes adoption a liability.
38%
Total Score
50
64
50
Health Score Breakdown
This is the only release, published over five years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the package not being deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in June 2021. No provided maintenance signal compensates for this inactivity.
The package has no declared license, detected license, or license file, leaving developers without clear permission to use or redistribute it.
The artifact has no README, tests, or changelog, although the exact release does have GitHub release notes. The release notes provide some transparency, but the missing consumer documentation remains a gap for a package developers must integrate.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest hygiene concern rather than evidence that the release is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Candour |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.