yuga/runtime
The MIT license and small, focused file tree make adoption straightforward. It is still a very new project, with no commits in the last three months and no security policy, so its maintenance and transparency remain limited.
62%
Total Score
50
100
83
83
Health Score Breakdown
The package is only 107 days old and has two releases, both published on the same day, so there is little release history to establish long-term maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. Because the package is only 107 days old, this is a meaningful warning about follow-up maintenance, though not proof of abandonment.
Composer is used as the build tool, but no security-scanning tooling was detected. The missing scanner is a modest transparency and maintenance gap for a package intended to run application code.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hamidouh Semix |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.8 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
nyholm/psr7-server Version ^1.1 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.