Package Health

metamodels/attribute_rating

The linked project has tests, organization backing, and security scanning, while the repository remains active rather than archived. Its workflow uses six unpinned actions and lacks a security policy.

Latest 2.3.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 16 releases over more than 13 years, but none in the last 12 months; the latest release was about 18 months ago, indicating slowed maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, reinforcing the release-history evidence of a maintenance pause.

Repo issue activitycaution

There is only one open issue and no issues or pull requests were opened or closed in the last month, providing little evidence of current community activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package integrated into applications.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all six action references are unpinned and a high-confidence condition always evaluates true.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Christian Schiffler
Stefan Heimes

Direct Dependencies

DependencyLast ReleaseScore
doctrine/dbal
Version ^3.6.0
—
—
symfony/config
Version ^5.4
—
—
metamodels/core
Version ^2.3
—
—
symfony/routing
Version ^5.4
—
—
contao/core-bundle
Version ^4.13.0 <5.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform