Package Health

shucream0117/discord-php

This release is usable and has several healthy basics: it is an established MIT-licensed stable major release, is not deprecated, has no install-time lifecycle scripts, uses a modest declared dependency set, and is backed by a matching non-archived repository. However, maintenance and transparency are limited: the package has only three releases over about 3 years 8 months, no commits or active maintainers in the last 3 months, no tests, changelog, security policy, or security scanning, and essentially no repository adoption signals. The very small seven-file project and single-user ownership further increase bus-factor and abandonment risk, so this is a caution-level dependency rather than an obviously unfit one.

Latest v2.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package file treecaution

The complete seven-file tree is very small and transparent, but it contains only two source files and no test, CI, or security-related project structure, limiting evidence of engineering maturity.

Package scaffoldingcaution

A README is present, but the artifact and repository contain no tests or changelog. For a small library this is a genuine validation and change-history gap, with no provided repository evidence compensating for it.

Project backingcaution

The repository is owned by an individual user rather than an organization, and no broader project backing is shown. Combined with the single registry maintainer, this leaves a limited support and succession path.

Release historycaution

The package is about 3 years 8 months old but has only 3 releases, with one release in the last 12 months and a median interval of about 667 days; this indicates a thin release history and limited demonstrated maintenance cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months. This is the strongest maintenance concern because it shows no recent development activity, although the repository is not archived.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

shucream0117

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.0

Weekly Downloads

Info

Last Published
14 days ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform