Package Health

arul/reactphp-restler

The package includes tests, Psalm scanning, and a clear MIT license. Its small project footprint and unpinned workflow actions add modest maintenance and build-integrity concerns.

Latest 6.5.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has 92 releases since May 2019, but none in the last five years; the latest registry release was in August 2021. This is a substantial maintenance concern despite the earlier release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a largely inactive project. This increases abandonment risk for a package last released years ago.

Repo issue activitycaution

There were no new or closed issues in the last month, while four pull requests remain open. The lack of issue activity is neutral, but unresolved pull requests provide a small sign of limited follow-through.

Repo package mentioncaution

The linked repository name does not match the package name, and the repository README could not be confirmed to mention the package. That creates some uncertainty about whether the repository is the intended source, although a subpackage or related project can explain a mismatch.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less significant than the project's inactivity and does not by itself make the release unfit.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Luracast

Direct Dependencies

DependencyLast ReleaseScore
psr/container
Version ^2.0 || ^1.1
—
—
ringcentral/psr7
Version ^1.3
—
—
guzzlehttp/guzzle
Version ~7
—
—
logicalsteps/async
Version ^2.0
—
—
hansott/psr7-cookies
Version ^3.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform