xenolope/quahog
The package includes tests, a README, release notes, and a source repository that clearly matches it. Its workflow references are unpinned, and the repository has no security policy or security scanning; pin this version only if its older dependency support fits your PHP environment.
68%
Total Score
50
100
89
75
Health Score Breakdown
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this represents some maintainer-bus-factor concern, though repository activity shows the project is not abandoned.
The package has 10 releases since December 2016, but none in the last 12 months and the latest registry release was in November 2020. This is a meaningful freshness concern, although the linked repository was pushed recently.
There were no commits and no active maintainers in the measured three-month period. The recent repository push is reassuring but does not demonstrate sustained ongoing development.
Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe concern.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jonjo McKay |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 clue/socket-raw Version ^1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.