Package Health

bear/query-repository

AboutResource Query Responsibility Segregation (RQRS) is a caching framework for BEAR.Sunday that optimizes performance by separating query and command responsibilities. It features event-driven cache invalidation, dependency resolution, donut caching, CDN integration, and conditional requests.

Latest 1.17.0PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

90

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

The leading contributor made about 95% of the 175 recent commits, creating a genuine concentration risk. Organization backing and three additional contributors provide some continuity, but their activity is currently minimal.

Repo package mentioncaution

The repository name does not exactly match the package name and its README does not mention bear/query-repository, creating some uncertainty about package-to-repository alignment. The repository's README and source identity do correspond to BEAR.QueryRepository, so this is a caution rather than a severe concern.

Token permissionscaution

All four workflows omit top-level token permissions declarations. Although none requests top-level write access, explicitly declaring least-privilege permissions would improve workflow hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Akihito Koriyama

Direct Dependencies

DependencyLast ReleaseScore
ray/di
Version ^2.20
—
—
psr/log
Version ^1.1 || ^2.0 || ^3.0
—
—
ray/aop
Version ^2.19.1
—
—
psr/cache
Version ^1.0 || ^2.0 || ^3.0
—
—
bear/sunday
Version ^1.5
—
—

Weekly Downloads

Info

Last Published
26 days ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform