reliv/pipe-rat-2
The BSD-3-Clause license, clear README, and matching source repository improve transparency. The small dependency set is manageable, but ongoing maintenance cannot be relied on.
42%
Total Score
50
100
75
50
Health Score Breakdown
The package has had no release in more than six years and no releases in the last 12 months, despite 13 releases overall. This is strong evidence of abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
There were no new or closed issues or pull requests in the last month. With no recent commits or releases, this supports the view that the project is inactive rather than merely stable.
Composer is used for builds, but no security-scanning tooling is present. The missing scanning is a minor hygiene concern, not evidence that the package is unsafe to depend on.
The linked repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations. This adds a modest concern alongside the stronger inactivity evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 James Jervis |
| Rod McNew |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 reliv/zf-config-factories Version 3.* || 4.* | — | — |
reliv/zf-input-filter-service Version 0.* | — | — |
zendframework/zend-expressive Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.