Package Health

rcravens/php_bag_of_tricks

Tests, a release note, and a matching MIT license provide useful transparency. Seven runtime dependencies and no repository security scanning increase upkeep and review burden.

Latest v1.0.42PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Dependency profilecaution

Seven runtime dependencies, including several external service clients, create a meaningful maintenance and transitive-dependency surface for consumers.

Release historycaution

The package has 43 releases over about 19 months and four releases in the last 12 months, but the latest release was about 9 months before collection, suggesting slower recent maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months, which is a concrete sign of currently paused maintenance despite the release history.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little external evidence of maturity.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured, leaving a repository-level hygiene gap for a package with multiple runtime integrations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

rcravens

Direct Dependencies

DependencyLast ReleaseScore
twilio/sdk
Version ^8.3
—
—
nesbot/carbon
Version ^3.8
—
—
vimeo/vimeo-api
Version ^3.0
—
—
guzzlehttp/guzzle
Version ^7.9
—
—
openai-php/client
Version ^0.10.3
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform