metroapps/national_rail_timetable
This release shows strong recent maintenance activity and a stable, licensed, well-populated application package: it has 25 releases over roughly 3.8 years, 9 releases in the last 12 months, and was pushed very recently. However, Packagist marks the package as abandoned and names a replacement, which is a major adoption risk even though development remains active; maintenance is also entirely concentrated in one contributor, with minimal repository adoption and no security policy or security-scanning tooling. Developers should prefer the stated replacement unless they have a specific reason to depend on this package and can accept its abandonment status.
38%
Total Score
50
72
88
Health Score Breakdown
Packagist marks the package as abandoned and specifies miklcct/national_rail_timetable as the replacement. This is a severe dependency-lifecycle warning and outweighs the otherwise active release and repository activity.
The artifact includes a README and changelog, and the repository also has a changelog, but neither the package nor repository contains tests. For a web application this is a meaningful maintenance and regression-risk gap.
The source repository is owned by the individual user miklcct, not an organization. This is consistent with the single-maintainer activity profile and provides no organizational backing to offset the bus-factor concern.
One contributor made all 19 commits in the last 3 months, giving a 100% top-contributor share. Because the owner is an individual rather than an organization, there is no visible organizational handoff capacity, creating a real continuity risk.
The repository recorded 19 commits in the last 3 months, showing active work, but all activity came from one maintainer. The recent activity is reassuring while the concentration limits resilience.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filp/whoops Version ^2.14 | — | — |
php-di/php-di Version ^6.4 | — | — |
symfony/cache Version ^6.1 | — | — |
mongodb/mongodb Version ^2.0 | — | — |
monolog/monolog Version ^3.10 | — | — |
Weekly Downloads
Info
- Last Published
- 21 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.