Package Health

canaltp/mtt-bundle

The package is licensed, tested, and has release notes, with an active-looking repository rather than an archived one. Its package-to-repository link is unclear, and the available maintenance evidence is stale for a dependency with many runtime dependencies.

Latest 1.18.11PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The last registry release was in January 2021, about 5 years and 8 months before collection, with no releases in the previous 12 months. Its 100-release history shows past maturity but does not offset the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is strong evidence of weak current maintenance.

Repo package mentiondanger

The repository name does not match the package name and its README does not mention the package. That raises concern that the linked source may not actually correspond to this package, despite the repository otherwise containing related-looking source material.

Dependency profilecaution

The package declares 25 runtime dependencies, creating a broad maintenance surface for a release whose registry publication has been inactive for years. The signal does not show that these dependencies are unsafe, only that compatibility and upkeep may be harder.

Repo issue activitycaution

There were no new or closed issues or pull requests in the measured month, while 12 issues and 5 pull requests remain open. This is consistent with limited current project activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vincent Degroote
Rémy Abi-Khalil

Direct Dependencies

DependencyLast ReleaseScore
itbz/fpdi
Version 1.4.4
—
—
twig/twig
Version ^1.26
—
—
league/csv
Version ~7.0
—
—
guzzle/guzzle
Version ^3.8.1
—
—
twbs/bootstrap
Version 3.1.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform