Package Health

danielspk/tornadohttpskeletonapplication

Tornado Http Skeleton Application

Latest v0.8.1PackagistPackagist

40%

Total Score

unhealthy

Risky to depend on: no releases or repository activity for over ten years, with no active maintainers.

Health Score Breakdown

Release historydanger

The package has made no release in over ten years, with zero releases in the last 12 months. This is strong evidence of abandonment for an application framework package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this supports a substantial abandonment concern.

Dependency profilecaution

The package declares 15 runtime dependencies for a framework-style application skeleton. This adds maintenance surface, especially given the long absence of releases, but the signal alone does not establish dependency failure.

Lifecycle scriptscaution

A post-create-project-cmd script runs during project creation. This is relevant install-time behavior that deserves review, but it is not by itself evidence that the package is unsafe to depend on.

Project backingcaution

The repository is owned by the same individual namespace as the package, providing a consistent ownership link. It does not show organization backing that could compensate for a thin maintainer base.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel M. Spiridione

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ~1.0
—
—
doctrine/orm
Version ~2.0
—
—
nelmio/alice
Version ~2.0
—
—
monolog/monolog
Version ~1.0
—
—
symfony/console
Version ~3.0
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform