Package Health

iibs/arnm-catalog

The source includes tests and a substantial Symfony bundle layout, which provides some implementation evidence. It has no license, no security policy, and the linked repository neither matches the package name nor mentions it in its README.

Latest 1.0.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This package has only one release, published over 12 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency expected to receive maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent push timestamp does not compensate for the absence of observed commit activity.

Licensecaution

No registry license declaration or license file was detected in the package or repository. This creates a real transparency and adoption risk for a dependency.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. That raises concern that the linked source may not clearly belong to this package.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a minor hygiene concern, not a standalone dependency health failure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alex Agulyansky

Direct Dependencies

DependencyLast ReleaseScore
doctrine/orm
Version >=2.2.3,<2.4-dev
—
—
iibs/arnm-media
Version 1.0.*
—
—
symfony/symfony
Version 2.4.*
—
—
stof/doctrine-extensions-bundle
Version dev-master
—
—

Weekly Downloads

Info

Last Published
12 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform