Symfony bundle for collecting and exposing prometheus metrics
38%
Total Score
unhealthy
Risky: no release or commit activity for over six years, creating a strong abandonment concern.
The package has had no release in over six years: its latest release was March 2020, with no releases in the last 12 months. The early three-release history shows initial activity but does not offset the long gap.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with prolonged inactivity and elevated abandonment risk.
One registry maintainer is a limited publishing base. This is not inherently unhealthy for a user-owned project, but there is no provided evidence of a broader active maintainer group to offset the inactivity.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency and maintenance gap, though not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^4.3.0|^5.0.0 | — | — |
symfony/http-kernel Version ^4.3.0|^5.0.0 | — | — |
symfony/dependency-injection Version ^4.3.0|^5.0.0 | — | — |
endclothing/prometheus_client_php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.