Dapr Implementation in PHP
55%
Total Score
caution
Usable with caveats: nearly five years without a release outweighs otherwise solid documentation and project backing.
The package has eight releases but none in the last 12 months; its latest registry release was nearly five years ago. This is a significant maintenance and abandonment concern for a dependency.
There were zero commits and zero active maintainers in the last three months. This recent absence of implementation activity reinforces the stale release history.
The package declares 16 runtime dependencies, including several framework and HTTP components, which increases the maintenance surface but is plausible for an SDK of this scope.
The artifact declares MIT and includes a license file, but the detected license text is Apache-2.0, creating a material license inconsistency despite the repository also containing a license file.
The repository has new issues and pull requests in the last month, but none were closed or merged, indicating limited visible resolution activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
nyholm/psr7 Version ^1.3 | — | — |
php-di/php-di Version ^6.3 | — | — |
php-di/invoker Version ^2.3 | — | — |
monolog/monolog Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.