Package Health/colinmollenhour/magento-redis-session

colinmollenhour/magento-redis-session

Usable with caveats: this is a mature, stable package with a clear README, release notes, and no deprecation or archival warning. However, it has had no release in over a year, no recent repository commits, no security policy, and the repository does not clearly mention the package name.

Latest 3.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since March 2013 with 45 releases, but it had no releases in the last 12 months and its latest release was in May 2025. That indicates slowing maintenance for a dependency handling Magento sessions.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the year without a registry release, this is a meaningful maintenance and abandonment concern.

Repo package mention

The repository name does not match the package name, and its README does not mention the package. Although subpackages can legitimately use a differently named repository, this combination makes the source relationship less transparent.

Repo tooling

The repository uses Composer, which supports reproducible package management, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The linked repository has no security policy. For a session-handling package, the absence of a documented vulnerability-reporting path reduces transparency and makes security maintenance harder to assess.