Package Health

zetacomponents/mvc-tools

The package is licensed, tested, and has a small dependency footprint. Its repository is not archived and has no open issues, but workflow pinning and security-policy coverage are limited.

Latest 1.2.4PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has 16 releases since May 2012, but none in the last 12 months; the latest release was in October 2024. This indicates materially slowed maintenance for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. This weakens evidence of ongoing maintenance, despite the later recorded repository push.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than an archived or deprecated project.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but its one action reference is unpinned. That leaves a modest reproducibility and workflow supply-chain hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sebastian Bergmann
Kore Nordmann
Derick Rethans
Tobias Schlitt
Alexandru Stanoi
James Pic

Direct Dependencies

DependencyLast ReleaseScore
zetacomponents/base
Version ~1.8
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
18 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform