Package Health

boomcms/boom-core

The repository includes tests, a changelog, release notes for this version, and an MIT license. The registry has seen no release for about 2 years and 7 months, while repository activity shows no active maintainers in the last 3 months; the missing security policy adds a smaller transparency concern.

Latest v9.1.4PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 326 releases since April 2015, but none in the last 12 months and its latest registry release was about 2 years and 7 months ago. That long pause materially raises maintenance risk despite the strong historical cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This indicates currently inactive development and reinforces the release gap.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than evidence of abandonment or unsafe release behavior.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
lootils/geo
Version ^0.1.1
—
—
thujohn/rss
Version ~1.0
—
—
doctrine/dbal
Version 2.5.*
—
—
mpratt/embera
Version 1.9.*
—
—
rych/bytesize
Version 1.0.*
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform