ysocode/peach
The MIT license, clear README, and release notes make the package easy to evaluate. Its release and commit activity have stopped, while the repository has no security policy or scanning tools.
58%
Total Score
50
100
83
83
Health Score Breakdown
There were zero commits and zero active maintainers in the last three months. Combined with no releases in the last year, this is the strongest evidence of stalled maintenance.
Only one registry account has publishing access, giving the release process a thin administrative base. The repository is user-owned rather than organization-owned, so there is no visible organizational backing to offset that concern.
The package has 11 releases since January 2024, but none in the last 12 months; its latest release was in March 2025. This materially raises maintenance and abandonment concerns.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides little supporting evidence of community adoption or review.
Composer build tooling is present, but no security scanning tools were detected. That weakens automated oversight of a package that executes local development commands and manages Docker-related files.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Yuri Oliveira |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^5.0|^6.0|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.