zafranf/zetthcore
The release has notes, a matching source repository, and no install scripts. Its single publisher and absent security policy reduce resilience, while the license mismatch should be clarified before adoption.
58%
Total Score
50
83
75
Health Score Breakdown
The manifest declares MIT and the artifact contains a license file identified as LGPL-2.1. Because the detected license does not match the declaration, the licensing terms need clarification.
Only one registry account has publish access. The repository is user-owned rather than organization-backed, so there is little visible publishing redundancy if that maintainer becomes unavailable.
The package has 97 releases since 2019, but none in the last 12 months and the latest release was 16 months ago, indicating a prolonged maintenance gap.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the concern that maintenance has stalled after the assessed release.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Zafran Fadilah |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/ui Version ^4.5 | — | — |
laravel/tinker Version ^2.9 | — | — |
zafranf/helpers Version dev-master | — | — |
jenssegers/agent Version ^2.6 | — | — |
laravel/framework Version ^11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.