Package Health

yarri/gif-creator

Its narrow scope and two runtime dependencies keep integration straightforward. The source has no recent activity or security policy, and the linked repository does not identify this package in its README, so future maintenance and ownership are uncertain.

Latest 1.0.1PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has had only two releases, both published about 846 days ago, with no release in the last 12 months. This indicates inactive maintenance, although the stable 1.0.1 line may be sufficient for a small utility.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, with the last push about 846 days ago. This is meaningful evidence of stalled maintenance.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. That raises uncertainty about whether the linked repository is the actual source, even though a name mismatch alone could be normal for a subpackage.

Repo toolingcaution

The repository uses Composer for its build and dependency tooling, which fits the package ecosystem. No security scanning tooling is present, leaving a modest transparency and maintenance gap.

Repository archivedcaution

The linked repository is not archived, so it remains available for inspection and possible maintenance. Its last push was about 846 days ago, which is consistent with the inactive release history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Clément Guillemain

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform