phossa/phossa-db
It has a clear README, MIT licensing, tests, and a small dependency set. However, it has had no release or commit activity for about 10 years, so maintenance and compatibility risk are substantial.
42%
Total Score
0
100
75
50
Health Score Breakdown
The package has had only 3 releases, all concentrated in April 2016, with none in the last 12 months. The roughly 10-year gap is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and leaving current maintenance capacity un demonstrated.
Composer build tooling is present, but no security scanning tool was detected. This is a minor transparency and hygiene gap, not enough to outweigh the much larger inactivity concern.
No security policy was found in the linked repository, leaving vulnerability reporting expectations unclear. This adds a modest transparency concern for a database connectivity library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hong Zhang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phossa/phossa-shared Version * | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.