oroshi/oroshi-core
Its clear MPL-2.0 licensing, tests, README, and Composer tooling provide useful transparency. The large runtime dependency set also increases maintenance effort for adopters.
18%
Total Score
0
50
63
75
Health Score Breakdown
Packagist marks the entire package as abandoned and recommends daikon/boot as its replacement. This is a severe adoption concern beyond a deprecation limited to one release.
The package has only two releases, with the latest published on February 13, 2021 and none in the last 12 months. This indicates a long-standing lack of release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive project.
The package declares 27 runtime dependencies, creating a relatively large upgrade and compatibility surface for a small, inactive package. No compensating maintenance evidence is present in this signal.
The linked repository is named daikon-cqrs/boot, does not match or mention oroshi/oroshi-core in its README, and therefore may not be the package's actual source project.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 | — | — |
aura/router Version ^3.0 | — | — |
relay/relay Version ^2.0 | — | — |
daikon/config Version master@dev | — | — |
daikon/entity Version master@dev | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.