Package Health

carno-php/console

It has an MIT license, tests, organization-backed source, and no install-time scripts. The very short documentation and absent security policy leave limited transparency for maintenance decisions.

Latest 2.0.0PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The latest release was in July 2019, with no releases in the past 12 months and only four releases overall. This is strong evidence of abandonment risk despite a historically regular median interval of about 71 days.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no activity for roughly seven years.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these figures provide little external evidence of ongoing community use.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling was detected. This is a transparency and hygiene gap, not evidence of malicious behavior.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a modest transparency concern alongside the long inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
symfony/console
Version ~3.3|~4.0
—
—
carno-php/config
Version ~2.0
—
—
carno-php/promise
Version ^1.0
—
—
carno-php/log-slim
Version ^1.0
—
—
symfony/var-dumper
Version ~3.3|~4.0
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform