netglue/expressive-prg
Its stable 1.0.1 release, MIT licensing, README, and repository tests provide useful transparency. The small dependency footprint helps, but the missing security policy leaves little assurance for future maintenance.
15%
Total Score
50
64
83
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk because the release is explicitly withdrawn from active maintenance.
The package has only two releases, and the latest was published in March 2017; it has had no release in over nine years. That strongly indicates abandonment for a dependency consumers may need to maintain.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The package therefore shows no current maintenance capacity.
The linked repository is not marked archived, but its last push was in March 2017. The unarchived status does not offset the observed lack of recent activity.
The linked repository has no security policy. This is a transparency and maintenance gap, especially for a package that is already abandoned, although it is less severe than the deprecation and inactivity evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 George Steel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zendframework/zend-session Version ^2.7 | — | — |
zendframework/zend-expressive Version ^1.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.