cboden/ratchet

Documentation, tests, release notes, and a security policy make the project straightforward to evaluate. Maintenance has stalled, and the workflow uses three unpinned actions, so pinning this version deserves caution.

Latest v0.4.4

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 27 releases since May 2012, but none in the last 12 months and its latest registry release was in December 2021. That long release gap is a meaningful maintenance concern despite the established history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the absent registry releases, this indicates stalled maintenance and increases abandonment risk.

Repo issue activity

There are only eight open issues and one open pull request, but no issues or pull requests were opened or merged in the last month. The low visible activity is a modest maintenance concern.

Repo tooling

The project uses Make and Composer, showing build tooling, but no security scanning tools were detected. This is a hygiene gap, partially offset by the repository's security policy and established tests.

Workflow audit

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all three referenced actions are unpinned, leaving the workflow exposed to moving action revisions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Chris Boden

Matt Bonneau

Direct Dependencies

Dependency	Last Release	Score
react/socket Version ^1.0 \|\| ^0.8 \|\| ^0.7 \|\| ^0.6 \|\| ^0.5	—	—
guzzlehttp/psr7 Version ^1.7\|^2.0	—	—
ratchet/rfc6455 Version ^0.3.1	—	—
symfony/routing Version ^2.6\|^3.0\|^4.0\|^5.0\|^6.0	—	—
react/event-loop Version >=0.4	—	—