naoned/oai-pmh-server-bundle
The package includes tests, a substantial README, a GitHub release note, and an MIT license. Its release and commit activity stopped years ago, and the linked repository does not identify this package in its README, increasing adoption risk.
42%
Total Score
50
75
50
Health Score Breakdown
The latest release was in March 2017, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment for a dependency intended for ongoing use.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no visible recent maintenance.
The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established. This creates a transparency and provenance concern even though name differences can occur in related repositories.
The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities. This is a modest transparency gap for a package serving application data.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 vibby |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/common Version ~2 | — | — |
symfony/symfony Version ~2.7|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.