Package Health

contributte/messenger

Repository tests, release notes, organization backing, and a security policy provide useful support. CI uses unpinned actions and inherits secrets in one workflow, leaving avoidable supply-chain and credential-isolation gaps.

Latest v0.2PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Dependency profilecaution

The package has 10 runtime dependencies, including framework, transport, logging, and console components. This is a substantial integration surface and adds compatibility maintenance burden, but it is consistent with the package's framework-integration role.

Release historycaution

The package has only two releases, with the latest published about 2 years and 4 months ago and none in the last 12 months. This is a meaningful maintenance concern, although repository activity and release notes provide some transparency.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months. This weakens confidence in ongoing maintenance, though the repository is not archived and has a recent recorded push.

Repo toolingcaution

The repository uses Composer and Make for build tasks, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Version stabilitycaution

The assessed v0.2 release is not a prerelease, but the package remains below a stable major version and has a limited release history. That suggests a less mature compatibility commitment rather than abandonment by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Milan Felix Šulc

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^2.0.0 || ^3.0.0
nette/di
Version ^3.1.2
psr/cache
Version ^2.0.0 || ^3.0.0
psr/container
Version ^2.0.2
symfony/console
Version ^6.0.19 || ^6.2.10

Weekly Downloads

Info

Last Published
2 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform