Package Health

rshop/pohoda

This release has strong evidence of an active, established project: it has existed for over 8 years, has 74 releases including 6 in the last 12 months, a stable version, recent repository pushes, two active recent contributors, repository tests, and a matching README and repository. However, the Packagist package is explicitly marked abandoned, with a replacement listed, which is a severe dependency-adoption concern even though the linked organization-owned repository remains active. Missing repository security policy, undeclared workflow permissions, and absent security scanning add transparency and CI-hardening gaps. Overall, the package is currently maintained but should be treated as an unhealthy dependency unless migration to the stated replacement is verified.

Latest v1.27.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tomas Saghy

Direct Dependencies

DependencyLast ReleaseScore
symfony/options-resolver
Version ^4.0 || ^5.0 || ^6.0 || ^7.0 || ^8.0

Weekly Downloads

Info

Last Published
9 days ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform