goodcatch/phpmentors-workflower
The project has had no commits or releases for about five years, and the linked repository does not identify this package. A license, tests, README, and stable version help, but they do not offset the abandonment and ownership concerns.
42%
Total Score
38
100
61
83
Health Score Breakdown
This is the only release, published about five years ago, with no releases in the last 12 months. That is strong evidence of an unmaintained dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the absence of releases for about five years. This materially raises abandonment risk.
The linked repository name does not match the package name and its README does not mention the package. This creates a concrete concern that the repository may not actually be the package's source.
Only one registry account has publish access. That is not conclusive by itself, but there is no organizational backing or active contributor evidence provided to compensate for the thin publishing base.
The source repository is owned by an individual account rather than an organization, and no organizational backing is shown. Combined with the single registry maintainer and inactivity, this leaves limited visible continuity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Atsuhiro Kubo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/expression-language Version ^5.3.7 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.