Package Health

phalcon/traits

Phalcon Traits 4.1.0 appears to be a healthy dependency: it has a five-year release history, a stable non-prerelease version, recent publication activity, no registry deprecation, clear BSD-3-Clause licensing, documented tests and changelog, and a repository that is actively maintained and backed by the Phalcon organization. Build and security hygiene are strong, including Dependabot, a security policy, read-only workflow permissions, and no analyzed dangerous workflow patterns. The main concern is concentrated maintenance: all 15 commits in the last 3 months came from one contributor, although the organization backing and recent merged pull requests reduce the abandonment risk. Repository popularity is low, but that is supporting evidence rather than a decisive health issue.

Latest 4.1.0PackagistPackagist

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Repo bus factorcaution

One contributor made all 15 commits in the last 3 months, creating a concentrated maintenance dependency. This concern is partly mitigated by the repository being owned by the Phalcon organization, which can provide handoff capacity.

Repo commit activitycaution

The repository recorded 15 commits in the last 3 months, showing current development activity, but all activity came from one active maintainer.

Repo popularitycaution

The repository has only 6 stars and 4 forks, indicating limited visible adoption; this is a mild supporting concern but not evidence of poor maintenance by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Phalcon Team
Contributors

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
17 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform