silverstripe/upgrader

The BSD-3-Clause license, included tests, release notes, and organization-backed repository provide useful transparency. Long-term maintenance looks too weak for a dependable upgrade tool, so pinning this release carries substantial abandonment risk.

Latest 1.4.3

Packagist

42%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 19 releases since June 2016, but its latest release was over 7 years ago and it had no releases in the last 12 months. That strongly raises abandonment risk.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is strong evidence that maintenance has effectively stalled.

Dependency profile

Fourteen runtime dependencies, including parser, analysis, console, and filesystem components, create a relatively broad dependency surface for a command-line upgrade tool. This is a moderate maintenance consideration, not evidence of abandonment by itself.

Repo issue activity

The repository has 56 open issues and no new or closed issues or pull requests in the last month. This suggests unresolved backlog and weak recent project activity.

Repo tooling

Composer is used for builds, but no security-scanning tooling is present. The missing scanner is a hygiene gap, while the build tooling itself is appropriate for the ecosystem.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sam Minnee

Direct Dependencies

Dependency	Last Release	Score
m1/env Version ^2.1	—	—
symfony/yaml Version ^3.2	—	—
composer/semver Version ^1.4	—	—
phpstan/phpstan Version ~0.9.0	—	—
symfony/console Version ^3.2 \|\| ^4	—	—