Package Health

olakunlevpn/ratchet

Its documentation, tests, changelog, and security policy provide a solid foundation for a focused compatibility fork. The small project footprint and unpinned CI actions leave maintenance and build reproducibility less established.

Latest 0.4.4PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

This is a young package with one release in 98 days and no established release cadence, so long-term maintenance is not yet demonstrated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Because the package is only 98 days old, this is concerning but not evidence of long-term abandonment by itself.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 0 watchers. Popularity is limited supporting evidence rather than a verdict, but it provides little external evidence of maturity.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk on its own.

Version stabilitycaution

Version 0.4.4 is not a stable-major release, which signals compatibility expectations may still change despite the release being non-prerelease.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Chris Boden
Matt Bonneau

Direct Dependencies

DependencyLast ReleaseScore
react/socket
Version ^1.0 || ^0.8 || ^0.7 || ^0.6 || ^0.5
guzzlehttp/psr7
Version ^1.7|^2.0
ratchet/rfc6455
Version ^0.3.1
symfony/routing
Version ^2.6|^3.0|^4.0|^5.0|^6.0|^7.0|^8.0
react/event-loop
Version >=0.4

Weekly Downloads

Info

Last Published
3 months ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform