Package Health

cerbero/fluent-api

Risky to adopt: the release is nearly a decade old, with no releases in the last 12 months and repository activity ending shortly after its initial launch. It has solid packaging basics and a matching source repository, but its README remains largely template text and there is no security policy.

Latest 1.4.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

61

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Release historydanger

The package is about 10 years old, has only 6 releases, and has had no release in the last 12 months; the latest release was in May 2016. This strongly suggests abandonment risk despite the short early release intervals.

Repository archiveddanger

The repository is not formally archived, but it was last pushed in May 2016, immediately after the latest release. The lack of archival status does not compensate for the observed lack of ongoing activity.

Package scaffoldingcaution

The artifact includes a README and changelog, while the repository includes tests and a changelog, which supports basic project transparency. The README content is partly uncustomized template text, limiting its usefulness to consumers.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. While a clean issue tracker can be positive, here it is consistent with the repository's long-term inactivity rather than active maintenance.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive by itself, but these counters provide no supporting evidence of a healthy user or contributor community.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andrea Marco Sartori

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.2
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform