phoice/phlexa-expressive
Its eight runtime dependencies increase integration and upgrade burden, and the assessed release is an old beta behind the stable 2.0.1 line. The lack of recent releases leaves little evidence of ongoing maintenance, so choose an actively maintained alternative.
15%
Total Score
50
17
Health Score Breakdown
Packagist marks the entire package as abandoned and provides no replacement. This is a severe direct warning against taking a new dependency on it.
The latest release was about seven years ago, with no releases in the last 12 months. That provides strong evidence of abandonment for a package intended to support application development.
The package has eight runtime dependencies, including framework components and an HTTP middleware stack. This is a meaningful upgrade surface for an abandoned package, although the dependency count alone is not severe.
The assessed version is a beta release, while the registry reports a later stable 2.0.1 version. Depending on this older prerelease increases compatibility and support risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phoice/phlexa Version 1.0.0-beta-8 | — | — |
psr/http-message Version ^1.0 | — | — |
fig/http-message-util Version ^1.1 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
zendframework/zend-servicemanager Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.