Package Health

irontec/ivoz-api

Healthy and actively usable, with a few transparency and resilience gaps. It has a long release history, a current non-archived repository, and organization backing, but recent work is concentrated in one contributor and the project lacks a security policy and declared workflow permissions.

Latest 5.8PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Dependency profilecaution

The package has 17 runtime dependencies, including framework, serializer, HTTP, and authentication components. This is a substantial dependency surface to maintain, but it is consistent with the library's API-platform role.

Package scaffoldingcaution

The artifact includes a README, but neither the package nor repository reports tests or a changelog. This reduces transparency for a substantive API library, though the active release history partly compensates.

Repo bus factorcaution

All 2 recent commits came from one contributor, creating a narrow maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

There were 2 commits in the last 3 months, showing recent activity, but only one active maintainer contributed them. The activity is positive but thin.

Repo toolingcaution

The repository uses Composer and has a PHPStan workflow, showing basic build and analysis tooling. No security scanning tool is present, leaving a modest tooling gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Carlos Cruz
Ivan Alonso
Mikel Madariaga
Daniel García
Roger Batista

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.8.0
symfony/finder
Version ^5.4
guzzlehttp/psr7
Version ^1.9.1
symfony/routing
Version ^5.4
api-platform/core
Version 2.6.*

Weekly Downloads

Info

Last Published
7 days ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform