Package Health

brooke1220/darabonba

Client of Darabonba for PHP

Latest 1.0.3PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

63

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has only 3 releases, all clustered on July 10, 2025, and none in the following 12 months. This indicates an unproven and currently inactive release cadence.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the absence of recent releases. This materially raises abandonment risk.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package. That weakens evidence that the repository documentation is specifically maintained for this release.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself show unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no detected injection or high-severity findings, but all 3 action references are unpinned. That leaves build inputs less reproducible and increases supply-chain hygiene risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alibaba Cloud SDK

Direct Dependencies

DependencyLast ReleaseScore
alibabacloud/tea
Version ^3.2
—
—
psr/http-message
Version ^2.0
—
—
guzzlehttp/guzzle
Version ^6.3|^7.0
—
—
adbario/php-dot-notation
Version ^2.4
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform