gemorroj/activemq-bundle
Its small artifact is easy to inspect, and it has no install-time scripts. Use overblog/activemq-bundle instead, which the registry names as the replacement.
18%
Total Score
0
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned and names overblog/activemq-bundle as its replacement. This is a direct dependency risk and outweighs the repository not being archived.
The latest release was published in October 2016, with no releases in the last 12 months. That nearly decade-long gap strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in December 2017. This provides no evidence of current maintenance.
No license declaration or license file was found in the package or repository. Without licensing terms, adopting the dependency creates a legal and transparency gap.
The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked source repository clearly corresponds to this release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Overblog |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/symfony Version ~2.5|~3.0 | — | — |
centraldesktop/stomp Version 1.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.