phpgears/cqrs
The package has tests, a matching source repository, a clear MIT license, and organization backing. Its small dependency surface helps, but the roughly six-year release and commit gap leaves maintenance and compatibility risk for a new dependency.
43%
Total Score
50
100
70
50
Health Score Breakdown
The latest release was about 6 years ago, with no releases in the last 12 months; the earlier seven-release history shows initial activity but not current maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the prolonged release gap and increasing abandonment risk.
The package defines post-install and post-update scripts, adding installation-time behavior that deserves scrutiny beyond the library code.
The repository is not archived, which is a modest positive, but its last push was about 6 years ago and does not offset the absent recent activity.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than the demonstrated maintenance slowdown.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Julián Gutiérrez |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpgears/dto Version ~0.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.