Package Health

ravendb/ravendb-php-client

The documented client and organization-backed repository provide useful continuity, while the source has not produced a registry release since December 2023. Recent commit activity is absent and workflow references are unpinned, so pinning this version deserves care.

Latest 5.2.6PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has had no registry release in the last 12 months, with the latest release on December 6, 2023. Its seven-release history and roughly 83-day median interval show an established package, but current release maintenance is a concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, even though the repository is not archived.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves avoidable build reproducibility and action-change risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aleksandar Sabo

Direct Dependencies

DependencyLast ReleaseScore
ramsey/uuid
Version ^4.2
—
—
symfony/mime
Version ^6.1
—
—
doctrine/inflector
Version ^2.0
—
—
symfony/serializer
Version ^6.1
—
—
symfony/http-client
Version ^6.1
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform