Phalcon Traits 4.1.0 appears to be a healthy dependency: it has a five-year release history, a stable non-prerelease version, recent publication activity, no registry deprecation, clear BSD-3-Clause licensing, documented tests and changelog, and a repository that is actively maintained and backed by the Phalcon organization. Build and security hygiene are strong, including Dependabot, a security policy, read-only workflow permissions, and no analyzed dangerous workflow patterns. The main concern is concentrated maintenance: all 15 commits in the last 3 months came from one contributor, although the organization backing and recent merged pull requests reduce the abandonment risk. Repository popularity is low, but that is supporting evidence rather than a decisive health issue.
88%
Total Score
80
100
94
100
One contributor made all 15 commits in the last 3 months, creating a concentrated maintenance dependency. This concern is partly mitigated by the repository being owned by the Phalcon organization, which can provide handoff capacity.
The repository recorded 15 commits in the last 3 months, showing current development activity, but all activity came from one active maintainer.
The repository has only 6 stars and 4 forks, indicating limited visible adoption; this is a mild supporting concern but not evidence of poor maintenance by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.