Package Health

dalira-php/project

The release is MIT-licensed, stable, and has a recent release with linked notes. Its small repository has no recent commits, no security policy or scanning, and the included README describes Plates rather than this package.

Latest v2.0.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Lifecycle scriptscaution

The package runs a post-install command, which adds installation-time behavior that consumers must account for. No provided signal shows that this script is unsafe, so this is a limited caution rather than a severe risk.

Package scaffoldingcaution

A README and release notes are present, but the excerpt describes the vendored Plates project and its Composer package rather than this package, weakening documentation transparency. Missing tests and a changelog are normal for a published artifact and are not concerns here.

Project backingcaution

The repository is owned by a user account rather than an organization, providing limited visible project backing. The matching registry namespace and repository owner offer some continuity but not a broad maintainer base.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a package released recently, that is a meaningful maintenance concern and raises the risk of stalled fixes.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. The clean tracker is not inherently negative, but it offers little evidence of an active maintenance community.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
league/plates
Version ^3.6

Weekly Downloads

Info

Last Published
3 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform