Package Health

andreybolonin/php-pm

Clear documentation, tests, licensing, and package-to-repository alignment provide useful transparency. The small release history and absent security policy leave this older tool with limited evidence of ongoing care.

Latest 1.0.1PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has only 2 releases, with the latest in March 2018 and no releases in the last 12 months. This is strong evidence of long-term inactivity, although the repository is not archived.

Repo commit activitydanger

There were 0 commits and 0 active maintainers in the last 3 months, consistent with a project that is no longer being maintained. No recent activity compensates for this gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a meaningful gap for a process manager used in production, though it is not evidence of a vulnerability itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
react/http
Version ^0.8
—
—
react/socket
Version ^0.8.6
—
—
react/stream
Version ^0.7.1
—
—
symfony/debug
Version ^2.6|^3.0
—
—
monolog/monolog
Version ^1.3
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform