Package Health

serjazz/diadoc-php-openapi

The package has a clear README, MIT licensing, release notes, and repository tests. Its young project has had no commits or active maintainers for about four months, and it lacks security scanning.

Latest v1.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the small registry maintainer list does not show broader project backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. With the latest push also about four months old, this is a meaningful maintenance concern for a young package.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull-request activity. For a small package this is not severe, but it provides little evidence of ongoing community maintenance.

Repo package mentioncaution

The repository name matches the package, but the README does not mention the package name. That weakens the link between the published package and its source and warrants caution.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Korolev Denis
Sidorov Sergey

Direct Dependencies

DependencyLast ReleaseScore
google/protobuf
Version 4.31.1
—
—
symfony/process
Version ^4.4
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform