dracoder/trusted-timestamping
Tests are included and installation has no lifecycle scripts, reducing operational concern. The package is mature and stable, but these positives do not offset its limited transparency and licensing restrictions.
48%
Total Score
50
70
100
Health Score Breakdown
The package has five runtime dependencies and two development dependencies, a manageable size for a bundle, though the declared runtime set includes PHPUnit and therefore warrants checking the manifest closely.
The manifest declares a proprietary license, with no recognized license text or license file. That materially restricts adoption and provides less clarity than an established open-source license.
Tests are present, which supports basic project maturity, but the package has no README even though this Symfony bundle requires consumer integration guidance.
The package has existed for about 4 years and has 19 releases, but only one release in the last 12 months indicates limited recent maintenance activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vakata/asn1 Version ^2.2 | — | — |
phpunit/phpunit Version ^9.5 | — | — |
eightpoints/guzzle-bundle Version ^8.2 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.