Package Health

zakarialabib/flysystem-google-drive-ext

Risky to adopt: this package has had only one v0.0.1 release, with no commits or releases for about three years. Its matching repository, substantial README, and Apache-2.0 license help, but the tiny project lacks tests and security tooling.

Latest v0.0.1PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

There has been only one release, published about three years ago, with no releases in the last 12 months. That strongly suggests the package is dormant, although it is not deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a substantial maintenance and abandonment concern.

Lifecycle scriptscaution

The package defines post-install, post-update, and pre-autoload-dump scripts, increasing the amount of install-time behavior that must be trusted. No other provided signal demonstrates why these hooks are necessary or limits their risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing no supporting evidence of community review or adoption. Popularity is not required for a small package, so this is a secondary concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package handling Google Drive integration, that is a transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Zakakria Labib

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/psr7
Version ^1.7|^2.0
—
—
google/apiclient
Version ^2.2
—
—
league/flysystem
Version ^2.1.1|^3.0
—
—
guzzlehttp/guzzle
Version ^6.3 | ^7.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform