Package Health

yorcreative/argonaut-dto

This is a young but presently usable package with a stable v1 release, an active and unarchived organization-backed repository, clear licensing, repository tests, changelog, security policy, automated security tooling, and read-only workflow permissions. The main concerns are limited maturity—the project is only 42 days old—and a very thin recent maintenance base: one commit from one contributor in the last 3 months, with that contributor responsible for all recent commits. Zero repository popularity is weak supporting evidence but is not decisive for a new package; review the project again after a longer maintenance history before making it a deeply critical dependency.

Latest v1.2.0PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

Three releases over 42 days, with a median interval of about 21 days, show active initial iteration but do not yet establish long-term maintenance maturity.

Repo bus factorcaution

All recent commits come from one contributor, creating a concentrated bus factor. Organization ownership provides some potential handoff capacity, but no second active contributor is evidenced.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, with one active maintainer; this is a genuine maintenance-capacity concern, though the repository was recently updated and the package is very young.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This offers no external adoption evidence, but for a package only 42 days old it is supporting evidence rather than a standalone health failure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
yorcreative/data-validation
Version ^1.0

Weekly Downloads

Info

Last Published
12 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform