duncan3dc/sessions
Usable with caveats: it is a licensed, stable package with a matching repository, tests, documentation, and a recent release. However, no commits were recorded in the last three months, and the repository lacks security scanning and an explicit security policy.
68%
Total Score
75
100
89
75
Health Score Breakdown
The project has existed since July 2015 and released version 3.1.0 in January 2026, but only one release occurred in the last 12 months, indicating a slow cadence.
No commits and no active maintainers were recorded during the last three months, which is a meaningful maintenance concern despite the recent repository push and release.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Both analyzed workflows omit top-level token permissions, so their permissions are not explicitly constrained even though no write permissions were detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Craig Duncan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 || ^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr7-sessions/storageless Version ^9.0 || ^10.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.