Package Health

jacked-php/jacked-server

Tests, documentation, and an MIT declaration provide useful adoption support, and the organization-owned repository is still available. Unpinned workflow actions and no security policy weaken transparency; pin this release only if its beta status fits your deployment risk.

Latest v1.0.16-betaPackagistPackagist

57%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has had no releases in the last 12 months, despite 48 releases overall, indicating a prolonged pause after earlier activity. The repository was last pushed at the same time as the latest release, so the slowdown is not only registry-specific.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the absence of releases for over a year. This is a concrete abandonment concern, although the repository is not archived.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a server package with substantial runtime dependencies, that leaves a meaningful supply-chain hygiene gap.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This lowers transparency for a server package, even though it does not by itself show an active security issue.

Version stabilitycaution

Recent releases are 85% prereleases, and the assessed version is explicitly a beta, which increases compatibility and support uncertainty. The package is not deprecated, but its release profile does not show stable-major maturity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
dshafik/bag
Version ^1.0
nesbot/carbon
Version ^2.72
monolog/monolog
Version ^3.7
openswoole/core
Version ^22.1
symfony/console
Version ^7.0

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform