Package Health

adgoal-common/command-bus

The package includes tests, a README, stable versioning, and no install-time scripts. Its only release was in June 2021, the repository has not been pushed since then, and its proprietary license creates a serious adoption and redistribution concern.

Latest v4.0.0PackagistPackagist

32%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Licensedanger

The manifest declares the package proprietary, with no detected license and no license file in the package or repository. This is a serious transparency and redistribution concern for a package presented as open source.

Release historydanger

The package has only one release, published about five years ago, with no releases in the last 12 months. That strongly suggests limited maintenance capacity and raises abandonment risk.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is not required for a healthy package, but this provides little supporting evidence of active use or community visibility.

Repository archivedcaution

The repository is not archived, which avoids the strongest abandonment signal, but its last push was in June 2021 and does not offset the stale release history.

Security policycaution

The repository has no security policy. This is a transparency and incident-handling gap, though it is less severe than the licensing and maintenance concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
m6web/statsd-bundle
Version ^3.0
—
—
league/tactician-bundle
Version ^1.1
—
—
league/tactician-command-events
Version ^0.6.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform