proophsoftware/prooph-bundle
Risky to adopt: the last release was in March 2016 and the repository has had no commits in the past three months, indicating likely abandonment. It has clear licensing, matching organizational backing, documentation, and no registry deprecation, but those strengths do not offset its age.
35%
Total Score
50
71
Health Score Breakdown
The package has made no release in more than 10 years, with only three releases overall and none in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository recorded 0 commits and 0 active maintainers in the past three months, consistent with the release history and providing no evidence of current maintenance.
The repository is not archived, which is a modest positive, but its last push was in July 2016 and therefore does not compensate for the lack of recent activity.
The assessed release is still v0.1.2 rather than a stable major release, which increases compatibility and maturity concerns. It is not marked as a prerelease, but the very old 0.x line remains a caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexander Miertsch |
| Sandro Keil |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ~2.8 || ~3.0 | — | — |
prooph/event-store Version ^6.0 | — | — |
prooph/service-bus Version ^5.0.2 | — | — |
prooph/snapshotter Version ^1.0 | — | — |
symfony/http-kernel Version ^2.8 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.