Package Health

digphp/psr16

Its small, dependency-light source tree is easy to inspect and the package is clearly licensed. However, there has been no release or repository push for about 4 years and 6 months, with no tests or security policy visible.

Latest 1.0.0PackagistPackagist

48%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

58

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has only one release, published about 4 years and 6 months ago, with no releases in the last 12 months. That is strong evidence of stagnation for a dependency, despite the stable 1.0.0 version.

Repository archiveddanger

The repository is not archived, but its last push was about 4 years and 6 months ago, matching the package's only release. The non-archived status does not compensate for the prolonged absence of observed maintenance.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these values provide no meaningful community signal to offset the stale release and repository activity.

Security policycaution

The repository has no security policy. For a small package with no observed maintenance activity, this is a transparency gap, although it is secondary to the prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/simple-cache
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform