Package Health

bear/middleware

PSR-7 BEAR.Sunday middleware

Latest 1.0.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Dependency profilecaution

The package has nine runtime dependencies, including framework and middleware components. This is a substantial dependency surface that increases upgrade and compatibility maintenance work, though it is consistent with a framework middleware package.

Release historycaution

The package has only three releases since October 2015 and none in the last 12 months; the latest registry release was about six years ago. This is a meaningful sign of possible abandonment, although it is not proof of unfitness by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence that maintenance has stopped or become dormant.

Repo issue activitycaution

There are no open issues or pull requests, and no recent issue or pull request activity. This indicates no visible current maintenance demand or response activity.

Repo popularitycaution

The repository has only 4 stars, 4 forks, and 1 watcher. This is weak supporting evidence for community reach, but popularity alone does not determine whether a small package is healthy.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
bear/sunday
Version ^1.4
—
—
relay/relay
Version ^1.1
—
—
bear/package
Version ^1.9
—
—
bear/app-meta
Version ~1.0
—
—
psr/http-message
Version ~1.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform