nelexa/roach-php-bundle
The package includes tests, release notes, a clear MIT license, and a matching source repository. However, it has had no release or commit activity for nearly four years, with one registry maintainer and no security policy.
48%
Total Score
25
100
88
75
Health Score Breakdown
The latest release was published in October 2022, with no releases in the last 12 months; nearly four years without a release materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly four-year release gap and indicating inactive maintenance.
Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so the narrow publishing base adds some continuity risk.
No security policy is present in the repository. This is a transparency gap, though the available tooling and lack of reported workflow findings provide limited compensation.
The workflow was fully analyzed with no reported audit findings or untrusted checkout paths, but all three action references are unpinned, leaving avoidable update and provenance risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ne-Lexa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 roach-php/core Version ~1.1.0 | — | — |
symfony/config Version ^6.0 | — | — |
symfony/console Version ^6.0 | — | — |
symfony/serializer Version ^6.0 | — | — |
symfony/http-kernel Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.