phpcr/phpcr-migrations
Usable with caveats: it is a licensed, tested, clearly documented package from an active organization-backed repository, but maintenance has slowed substantially with no releases in over two years and no commits in the last three months. Review compatibility and be prepared to maintain it if needed.
68%
Total Score
67
100
88
80
Health Score Breakdown
The package has existed since 2015 and has eight releases, but its latest release was over two years ago and there were no releases in the last 12 months. This indicates slowed maintenance rather than abandonment on its own.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is the main concern for future fixes and compatibility work.
There are three open issues, but no issues or pull requests were opened or closed in the last month. This supports the conclusion that current project activity is quiet.
Composer is used as the build tool, but no security-scanning tools were detected. The missing scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Leech |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpcr/phpcr Version ^2.1 | — | — |
symfony/finder Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/console Version ^5.4 || ^6.0 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.