cobonto/core

MIT licensing, a matching organization repository, and no install-time scripts make the package straightforward to inspect and integrate. It has no security policy or scanning, while its broad runtime dependency set increases upkeep demands.

Latest 1.5.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The last registry release was in March 2018, about 8 years and 6 months ago, with no releases in the past 12 months. This strongly indicates abandonment despite the package's earlier release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the long release gap and leaving little evidence of current maintenance.

Dependency profile

The package declares 12 runtime dependencies and no development dependencies, including authentication, upload, messaging, and image components. This broad runtime surface increases maintenance and compatibility demands for an old release.

Repo tooling

Composer is used for builds, but no security scanning tools are present. That weakens automated detection of dependency or source issues, though it does not by itself establish abandonment.

Security policy

The repository has no security policy, so there is no documented channel or process for handling security issues. This adds a transparency gap for a package providing administrative functionality.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

mohammad sharif ahrari

Mousa najafi

Direct Dependencies

Dependency	Last Release	Score
cobonto/module Version 1.1.*	—	—
morilog/jalali Version ^2.3	—	—
tymon/jwt-auth Version 0.5.*	—	—
jenssegers/date Version ^3.2	—	—
kalnoy/nestedset Version ^4.3	—	—