Package Health

phlexible/message-bundle

The stable release line, MIT license, and one runtime dependency make the package straightforward to evaluate. Its source has no tests, changelog, security policy, or recent maintenance activity, leaving long-term support uncertain.

Latest 1.3.24PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was July 31, 2018, with no releases in the last 12 months despite 36 releases overall. This long period without updates is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the last push in 2018, this indicates the project is no longer actively maintained.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, and the repository also reports none. Missing tests and project documentation reduce transparency and maintenance confidence for a library.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide no meaningful community-maintenance cushion.

Repo toolingcaution

The repository uses Composer, confirming basic build tooling, but reports no security-scanning tools. The missing scanning is a hygiene gap rather than proof the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform