pyrex-fwi/deejaypool-bundle
The package includes a README and extensive tests, and it is not deprecated. Its install-time script and unclear version metadata add friction for adoption. The repository could not be found, so ongoing maintenance and provenance cannot be checked.
40%
Total Score
63
50
Health Score Breakdown
The latest release was on February 27, 2019, with no releases in the last 12 months. That long period without a release is strong evidence of abandonment risk despite the package having ten releases overall.
A post-install-cmd script runs during installation, adding execution-time supply-chain and installation complexity. No provided signal shows that this behavior is necessary or harmless.
The assessed version is 4.0.1, while the registry reports 1.2.1-alpha as the latest version and marks the latest profile as prerelease. This inconsistency reduces confidence in the release metadata.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christophe Pyree |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ~2.6 | — | — |
guzzlehttp/guzzle Version ~6.3 | — | — |
symfony/serializer Version ~3.2|~4.1 | — | — |
james-heinrich/getid3 Version ~1.9 | — | — |
symfony/monolog-bundle Version ~3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.