Package Health

pomm-project/model-manager

The package has solid documentation, tests, an MIT license, and an active-looking repository rather than an archived one. However, its registry release history stopped about nine years ago, with no recent commits or issue resolution, and the repository has no security policy.

Latest 2.0.2PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency, despite its earlier regular release cadence.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates effectively stopped maintenance.

Repo issue activitycaution

There are 19 open issues and one open pull request, but no issues or pull requests were closed or merged in the last month. Unresolved work without visible recent response increases maintenance risk.

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a database-oriented library, that makes vulnerability reporting and response expectations less transparent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Grégoire HUBERT

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ~1.0
—
—
pomm-project/foundation
Version ~2.0
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform