Package Health

phillipsharring/handlr-framework

Handlr is a lightweight PHP middleware style framework.

Latest v0.17.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Registry deprecationdanger

The registry deprecation mechanism is packagist_abandoned with deprecation_scope=package, which is a strong abandonment risk for any dependency. Even with a replacement suggested, this materially lowers adoption safety.

Maintainerscaution

Only one registry maintainer is listed. A single-person maintenance base compounds continuity risk, especially alongside the registry abandonment flag.

Release historycaution

Releases are frequent (20 in the last 12 months, median interval ~2 days) and the latest release is recent, which offsets abandonment concerns to some extent for this specific version.

Repo bus factorcaution

Commit activity is dominated by a single contributor (top share ~95%), with only two contributors detected in the last 3 months. That increases the chance maintenance stalls if the primary maintainer stops.

Repo package mentioncaution

The linked repository doesn’t match the package name and also doesn’t mention the package in its README (per repo_package_mention). That raises the risk the release may be packaged from an unexpected place.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Phillip Harrington

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3.0
—
—
ramsey/uuid
Version ^4.7
—
—
symfony/console
Version ^7.0
—
—
symfony/process
Version ^7.0
—
—
vlucas/phpdotenv
Version ^5.6
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
6 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform