phpixie/default-bundle
The package has a clear BSD-3-Clause license, tests, and a matching organization-owned repository. Its dependencies are modest and it has no install scripts, but long-term maintenance capacity is a significant concern.
45%
Total Score
50
100
71
75
Health Score Breakdown
The latest release was about 8 years and 7 months ago, with no releases in the past 12 months. This is strong evidence of abandonment risk for a dependency.
The repository recorded no commits and no active maintainers in the past 3 months, consistent with the package's prolonged release inactivity. The otherwise healthy project structure does not compensate for this maintenance gap.
Composer is used for builds, but no security-scanning tooling is present. For a small, dormant library this is a transparency gap, though it is secondary to the maintenance concern.
The repository is not archived, which is a positive sign, but its last push was about 8 years and 7 months ago. The unarchived status does not offset the lack of recent activity.
The repository has no security policy. This weakens vulnerability-reporting transparency, especially for a package with no recent maintenance activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Roman Tsiupa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpixie/di Version ~3.0 | — | — |
phpixie/bundles Version ~3.0 | — | — |
phpixie/console Version ~3.0 | — | — |
phpixie/bundle-framework Version ~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.