decodelabs/pandora

The repository is active and clearly matches the package, with a complete license, documentation, and release notes. Maintenance has slowed since the last release, and all seven workflow actions are unpinned; the project also has no security scanning or policy.

Latest v0.4.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 26 releases over about five years, but none in the last 12 months; the latest release was about one year ago. This indicates a meaningful slowdown, though the repository was pushed more recently.

Repo commit activity

There were no commits and no active maintainers in the last three months. This weakens evidence of ongoing maintenance, although the recent repository push and historical release cadence partly compensate.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That leaves a transparency and maintenance-hygiene gap for a package intended to sit in application infrastructure.

Security policy

The repository has no security policy. This reduces disclosure transparency, but it is a hygiene concern rather than evidence that the release is unsafe to depend on.

Version stability

Version v0.4.1 is not a stable major release, but it is not marked as a prerelease and recent releases contain no prerelease versions. This is a modest maturity limitation rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tom Wright

Direct Dependencies

Dependency	Last Release	Score
psr/container Version ^2.0.2	—	—
decodelabs/kingdom Version ^0.2	—	—
decodelabs/archetype Version ^0.4	—	—
decodelabs/slingshot Version ^0.3	—	—
decodelabs/exceptional Version ^0.6.3	—	—