Prometheus instrumentation library for PHP applications.
12%
Total Score
50
40
50
Packagist marks the entire package as abandoned and names promphp/prometheus_client_php as its replacement. This is a direct adoption warning for a dependency, not merely a release-level notice.
The package has had no releases in roughly six years, despite having 21 releases overall. That long period without a new release strongly increases abandonment risk.
The linked repository is archived and was last pushed in September 2020, indicating that the source project is no longer actively maintained.
There have been no new or closed issues or pull requests in the last month, with two issues still open. This supports the broader evidence of inactive maintenance.
The repository has no security policy. This is a transparency gap, although it is secondary to the package's abandonment and archived-source status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/polyfill-apcu Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.