mhor/php-mp3info
The package includes tests, a usable README, matching MIT licensing, and no install-time scripts. Its small scope limits the impact of the long maintenance gap, but dependency compatibility should be checked before adoption.
52%
Total Score
50
100
75
75
Health Score Breakdown
The latest release was December 18, 2017, with no releases in the last 12 months and only four releases overall. This is strong evidence of abandonment risk, although the package may be stable because its scope is narrow.
There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this materially increases the risk that compatibility issues will not be addressed.
Composer is used for the build, showing basic project tooling, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.
The linked repository is not archived, but its last push was December 18, 2017. The unarchived status is positive, while the old push date reinforces the maintenance concern.
The repository has no security policy, leaving no documented route for reporting vulnerabilities. This lowers transparency but does not by itself make the release unfit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 mhor |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ^3 | ^4 | — | — |
symfony/filesystem Version ^3 | ^4 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.