jackmartin/ratchet
The source includes tests, release notes, a license, and a security policy. Its complete packaging makes the release understandable, but future fixes and updates are uncertain.
48%
Total Score
50
80
100
Health Score Breakdown
The package has 27 releases but none in the last 12 months, and its latest release was about 4 years and 10 months ago. This is a substantial abandonment concern, despite the established release count.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having stopped receiving updates around 2021. No newer activity compensates for this gap.
The linked repository has 0 stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.
The single workflow was fully analyzed with no reported audit findings or untrusted code paths. However, all 3 action references are unpinned, leaving a supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Chris Boden |
| Matt Bonneau |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/socket Version ^1.0 || ^0.8 || ^0.7 || ^0.6 || ^0.5 | — | — |
guzzlehttp/psr7 Version ^1.0|^2.0 | — | — |
symfony/routing Version ^2.6|^3.0|^4.0|^5.0 | — | — |
jackmartin/rfc6455 Version ^0.3 | — | — |
symfony/http-foundation Version ^2.6|^3.0|^4.0|^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.