Package Health

jane-php/automapper

The MIT license, detailed README, and repository tests make the code easier to evaluate. Its workflow audit found no dangerous sinks, but the project lacks current maintenance and should be replaced with jolicode/automapper.

Latest v7.5.3PackagistPackagist

10%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

40

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and names jolicode/automapper as its replacement, making this release unsuitable for a new dependency.

Release historydanger

The package has 73 releases since April 2018, but its latest release was July 10, 2023 and it had no releases in the following 12 months, showing that activity has stopped.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the archived and abandoned project state.

Repository archiveddanger

The linked repository is archived, with its last push on December 2, 2023; archived source is a severe abandonment risk.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout and script-injection sinks. Its one unpinned action is a minor reproducibility concern, and the pull_request_target trigger is not dangerous on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Joel Wurtz
Baptiste Leduc

Direct Dependencies

DependencyLast ReleaseScore
nikic/php-parser
Version ^4.0
—
—
doctrine/inflector
Version ^1.4 || ^2.0
—
—
symfony/serializer
Version ^5.1 || ^6.0
—
—
symfony/property-info
Version ^5.3 || ^6.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform