Package Health

k2gl/pragmatic-franken

Clear documentation, tests, release notes, and security tooling make the project easier to evaluate and maintain. Its brief release history leaves limited evidence of long-term durability, so pinning this version is prudent.

Latest v1.1.2PackagistPackagist

67%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The starter declares 37 runtime dependencies, including substantial Symfony, database, messaging, and infrastructure components; that breadth increases update and compatibility burden, though it fits the package's full application-starter role.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer concentration represents a genuine continuity risk.

Release historycaution

Six releases arrived over roughly one day, showing active initial publication but not yet enough history to demonstrate durable maintenance over time.

Repo bus factorcaution

One contributor accounts for all recent commits, so maintenance depends entirely on a single person with no demonstrated handoff capacity.

Repo commit activitycaution

Only three commits from one active maintainer were recorded in the last three months, which shows recent activity but a thin maintenance base.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
k2gl/enum
Version ^2.1
—
—
symfony/uid
Version ^8.0
—
—
doctrine/orm
Version ^3.3
—
—
k2gl/app-env
Version ^1.0
—
—
doctrine/dbal
Version ^4.0
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform