ekyna/colissimo
The MIT license, focused README, and matching source make its intended use clear. Low adoption and no repository security scanning add little evidence of ongoing support.
40%
Total Score
0
75
50
Health Score Breakdown
This package has had one release, with no releases in nearly five years. That provides strong evidence of abandonment risk for a dependency receiving no subsequent maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases since November 2021. This substantially weakens confidence in ongoing maintenance.
The repository has only 2 stars, 4 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or contributor base.
Composer build tooling is present, but no security scanning tools were detected. The project is inspectable, yet there is limited evidence of automated security hygiene.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though it is less significant than the long maintenance pause.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Etienne Dauvergne |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ~6.0 | — | — |
symfony/serializer Version ^3.0|^4.0|^5.0|^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.