Package Health

nathanmac/parser

The package has a clear MIT license, a useful README, repository tests, and a small runtime dependency set. Its single-user ownership and lack of security policy leave less oversight if maintenance needs resume.

Latest v4.3PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was in September 2016, roughly 10 years ago, despite 27 historical releases. This is strong evidence of stale published maintenance and materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this points to very weak current maintenance capacity.

Project backingcaution

The registry and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it also means the project has limited visible institutional backing.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with nine open issues and three open pull requests. This indicates limited current project interaction and adds to the maintenance concern.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nathan Macnamara

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version ~2.0|~3.0
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform