Package Health

nordsoftware/lumen-cors

Unfit to use for a new dependency: the package is deprecated and its source repository is archived, with no releases or commits for several years. Its licensing, tests, documentation, and clean packaging are positives, but they do not offset the lack of ongoing maintenance.

Latest 3.5.0PackagistPackagist

18%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk even though the release itself is stable.

Release historydanger

The package has a long history with 32 releases, but its latest release was in March 2022 and it had no releases in the last 12 months. The established history is outweighed by the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This confirms that the maintenance concern is current rather than merely a slow release cadence.

Repository archiveddanger

The linked source repository is archived, indicating that active maintenance has ended. Its last push was in February 2023, so future compatibility and issue resolution are unlikely.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap, though the archived status is the more consequential concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Christoffer Niska

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version ^5.4 || ^6.0 || ^7.0 || ^8.0 || ^9.0

Weekly Downloads

Info

Last Published
4 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform