Package Health

richardkeep/envoy

Elegant SSH tasks for PHP.

Latest v2.0.1PackagistPackagist

52%

Total Score

caution

Usable with caveats: no release in about six years and no commit activity in about five years.

Health Score Breakdown

Release historycaution

The package has 41 releases, but its latest release was about six years ago and it had no releases in the last 12 months, indicating stalled maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with a project whose development has effectively stopped.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe concern for the score.

Repository archivedcaution

The repository is not marked archived, which leaves maintenance possible, but its last push was about five years ago and does not offset the lack of recent release activity.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, dangerous triggers, or untrusted checkouts. Both action references are unpinned, a mild reproducibility and supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Taylor Otwell

Direct Dependencies

DependencyLast ReleaseScore
symfony/console
Version ^4.3|^5.0
—
—
symfony/process
Version ^4.3|^5.0
—
—
guzzlehttp/guzzle
Version ^6.0
—
—
illuminate/support
Version ^6.0|^7.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform