mathrix/openapi-assertions
The repository has no tests or security policy, and it has almost no community activity. The MIT license and matching source repository improve transparency, but do not offset the package's abandonment.
12%
Total Score
50
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no usable replacement identified. This is a direct warning against taking a new dependency on the package.
The latest release was published nearly seven years ago, and there were no releases in the last 12 months. The nine-release history shows the project stopped rather than remaining actively maintained.
The repository recorded zero commits and zero active maintainers over the measured three-month period, consistent with the last push having occurred nearly seven years ago. The non-archived status does not compensate for the lack of current maintenance.
The repository has zero stars and forks and only one watcher, providing little evidence of a wider support or review community. Popularity is supporting evidence, but it reinforces the abandonment concern here.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a library used to validate API behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mathieu Bour |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpunit/phpunit Version ^7.0 || ^8.0 | — | — |
league/openapi-psr7-validator Version ^0.5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.