dkplus/annotations
The compact source tree is easy to inspect, and the MIT declaration provides clear licensing. Missing consumer documentation and security practices add friction and reduce confidence in long-term support.
32%
Total Score
50
64
75
Health Score Breakdown
This package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long period without releases.
The artifact has no README, making integration harder for a library consumers must understand. Missing tests and a changelog are normal for published artifacts and do not add concern here.
Composer is used for the build, which is appropriate, but no security-scanning tooling was detected. That modestly weakens assurance for a dependency with no recent maintenance activity.
The repository is not formally archived, which is a small positive, but it was last pushed about 10 years ago and therefore shows no practical sign of ongoing maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Oskar Bley |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/annotations Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.