geshan/pdepend-analyzer
Risky to adopt: this is a transparent, tested package with a matching source repository, but it has had no release since October 2014 and no repository commits for nearly 11 years. It may still work for legacy PHP projects, but its maintenance and compatibility risk are substantial.
38%
Total Score
0
70
100
Health Score Breakdown
The package has only one release, published nearly 12 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need compatibility or bug fixes.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the last push being nearly 11 years ago. The long inactivity materially increases maintenance and compatibility risk.
The repository is not marked archived, which avoids the strongest abandonment signal, but its unarchived status does not compensate for the nearly 11-year period without a push.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Geshan Manandhar |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version 2.5.5 | — | — |
symfony/config Version 2.5.5 | — | — |
symfony/finder Version 2.5.5 | — | — |
monolog/monolog Version * | — | — |
pdepend/pdepend Version 2.0.3 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.