bonwe/bonwenium
The README and package structure make the framework understandable, and the repository still matches the package. Its long inactivity, tiny maintainer base, and missing security policy leave substantial abandonment and maintenance risk.
38%
Total Score
25
71
50
Health Score Breakdown
The latest release was in November 2019, with no releases in the last 12 months despite 15 historical releases. This strongly indicates the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push occurring in November 2019. This is a substantial abandonment concern.
Only one account has registry publish access. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external indication of adoption or community support.
Composer is used for builds, which is appropriate, but no security-scanning tooling is present. This is a hygiene gap that is more concerning alongside the project's long inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 weibangwei |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 predis/predis Version ^1.1 | — | — |
bonwe/webdriver Version v1.0.3 | — | — |
monolog/monolog Version ^1.24 | — | — |
symfony/var-dumper Version ^4.2 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.