The single runtime dependency and Composer build setup keep adoption simple. The MIT license and matching repository help, but the very small project shows little evidence of ongoing care or security process.
38%
Total Score
100
100
63
75
Only two releases were published, with the latest nearly eight years ago and none in the last 12 months. This is strong evidence of abandonment risk for a package developers may need to rely on.
A README is present, but it is only 31 characters and the repository reports no tests or changelog. The missing tests and changelog are modest maturity gaps, while the README at least identifies the package.
The repository has zero stars and forks and only one watcher, offering little supporting evidence of community use or review. Popularity is not required for health, so this is a supporting caution rather than a decisive risk.
Composer is used as the build tool, but no security scanning tools are present. The missing scanning reduces supply-chain transparency for an already stale project.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dragonmantank/cron-expression Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.