carthage-software/elissa-bundle
The release is licensed, documented, and tied to a matching organization-owned repository. It should not be adopted because the package is marked abandoned, the repository is archived, and no commits have appeared in the last three months.
12%
Total Score
50
58
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on the package.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the abandonment signal rather than showing ongoing maintenance.
The linked source repository is archived, so its code is no longer expected to receive maintenance or fixes. The last push was on October 9, 2025.
All four releases occurred on the same day, and there has been no release activity since October 9, 2025. This indicates a short-lived project rather than an established maintenance cadence.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a transparency gap alongside the stronger abandonment signals.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 azjezz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^6.0 || ^7.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
symfony/http-kernel Version ^6.0 || ^7.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.