isaac/composer-semver-cli
Documentation, licensing, and release notes are solid, and the source repository is maintained by an organization. However, no release appeared in the last 12 months, commit activity is currently absent, and the registry marks the package abandoned.
38%
Total Score
75
75
75
Health Score Breakdown
Packagist marks the entire package as abandoned, which is a direct maintenance warning; the listed replacement is the same package, so it does not provide a clear migration path.
The package has nine releases since 2020, but none in the last 12 months. That gap raises abandonment risk for a dependency despite its established history.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no recent development activity.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a standalone adoption blocker.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aad Mathijssen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/semver Version ^3.4 | — | — |
symfony/console Version ^6.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.