codectrl-sro/apollo
Apollo appears to be a healthy, actively maintained package with a mature release history, stable major version, recent release activity, an unarchived organization-owned repository, tests, changelog, documentation, and clean workflow permission and dangerous-workflow profiles. The main reservations are a broad runtime dependency set, no detected security scanning or security policy, and highly concentrated recent commit activity: two contributors are active, but one made 13 of 14 commits. These are meaningful due-diligence concerns rather than evidence of abandonment, and the package is otherwise well maintained and transparently linked to its source repository.
82%
Total Score
90
50
89
90
Health Score Breakdown
The package declares 35 runtime dependencies, including framework, database, templating, authentication, mail, and image components; this breadth increases transitive maintenance and compatibility exposure, although the package description indicates some optional capabilities are suggestions.
Recent activity is highly concentrated: the top contributor made 13 of 14 commits, or about 93%. A second contributor is active and the repository is organization-owned, which partly compensates, but concentration remains a maintenance-continuity concern.
The repository has 0 stars, 1 fork, and 1 watcher. This is weak community-adoption evidence, but popularity is supporting evidence only and is outweighed here by the active release and commit history.
Composer build tooling is present, but no security scanning tools were detected. The missing security automation is a transparency and maintenance-hygiene gap rather than a standalone severe risk.
No repository security policy was detected. This weakens vulnerability-reporting transparency, though it does not by itself indicate that the package is unsafe to depend on.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 CodeCTRL |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.20 | — | — |
doctrine/orm Version ^3.3 | — | — |
league/route Version ^5.1 | — | — |
symfony/cache Version ^5.4 | — | — |
voku/anti-xss Version ^4.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.