coole/http-kernel
It has a clear MIT license, repository tests, and a small runtime dependency set. The long pause since 2021 and continued release-candidate status make abandonment and compatibility risk substantial.
42%
Total Score
50
100
69
50
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was about 4 years and 10 months ago. Four releases in total show some history, but the prolonged gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, with its last push in November 2021. This confirms that the release-history gap reflects inactive source maintenance.
The package runs post-install and post-update Composer scripts. These add installation-time execution risk and deserve review, although the signal alone does not establish that the scripts are unsafe.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of an external user base provides little additional confidence for a package already showing long-term inactivity.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a modest transparency gap, while the build setup is a positive.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 guanguans |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version ^5.3 | — | — |
symfony/http-foundation Version ^5.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.