envrin/apex
Documentation, tests, licensing, and a matching source repository provide useful transparency. The package has had no registry releases or repository commits for nearly seven years, with minimal adoption and no security policy.
40%
Total Score
0
75
83
Health Score Breakdown
The latest release was published nearly seven years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment for a framework dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The repository has only 2 stars, 2 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a wider support community.
The linked repository is not archived, which avoids the strongest explicit abandonment signal. Its last push was still nearly seven years ago, so this does not offset the inactive commit history.
No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, especially for a framework intended for online applications.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Envrin Group |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cboden/ratchet Version * | — | — |
phpunit/phpunit Version >=7.3.0 | — | — |
league/flysystem Version * | — | — |
guzzlehttp/guzzle Version >=6.0.0 | — | — |
textalk/websocket Version 1.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.