ergonode/importer
The package has a clear license, tests, organization ownership, and a matching repository, which support dependable use. Its maintenance and security automation evidence is limited, so pinning this older release carries ongoing compatibility risk.
54%
Total Score
50
50
81
100
Health Score Breakdown
The package has 47 releases and historically released about every 13 days, but it has had no releases in nearly 4 years and 8 months. The long publishing gap materially raises abandonment and compatibility risk.
There were no commits and no active maintainers in the last 3 months, consistent with the last repository push being in January 2022. This is strong evidence of stopped maintenance.
Sixteen runtime dependencies create a relatively broad dependency surface for a framework bundle, increasing compatibility exposure, but the signal does not show that the dependencies are unsafe or abandoned.
Composer build tooling is present, but no security scanning tools were detected. That is a security-hygiene gap, although it does not by itself show that the release is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^3.8 | — | — |
ergonode/api Version ^1.3.0 | — | — |
symfony/form Version ^4.4.11|^5.3 | — | — |
doctrine/dbal Version ^2.13 | — | — |
ergonode/core Version ^1.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.