Package Health

modufolio/appkit

Usable with caveats: the release is actively developed and well documented, with tests in the repository, a license, and no deprecation or archive warning. It is only 103 days old, has one contributor responsible for all recent commits, and lacks security scanning, so long-term resilience is not yet proven.

Latest v0.22.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Dependency profilecaution

The release declares 48 runtime dependencies across framework, database, security, and HTTP components. That breadth fits the described framework but increases upgrade and compatibility surface compared with a small library.

Project backingcaution

The registry namespace and repository owner match, but the owner is a user account rather than an organization. This supports package identity while offering less organizational maintenance redundancy.

Release historycaution

The package is young at 103 days but has 26 releases, including 26 in the last 12 months and a median interval of about 2 days 10 hours. This shows strong activity, though the short history limits evidence of long-term stability.

Repo bus factorcaution

One contributor made all 159 commits in the last 3 months, leaving no demonstrated backup maintainer. That concentration is a meaningful continuity risk for a framework with a broad dependency and feature surface.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is no visible community adoption signal to supplement the otherwise active development evidence. Popularity is supporting evidence, so this does not by itself make the release unfit.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Maarten Thiebou

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version 3.0
psr/clock
Version ^1.0
symfony/uid
Version ^7.4
doctrine/orm
Version ^3
symfony/lock
Version ^7.4

Weekly Downloads

Info

Last Published
6 days ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform