Package Health

sipsystemgm/parser-command-bundle

The package has a clear README, tests, changelog, and MIT license, which make adoption and review easier. Its dependency set is substantial, while the repository has no security policy or scanning tools, increasing maintenance risk.

Latest 1.2.3PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

Only three releases were published, all around October 2021, and there have been no releases in nearly five years. This strongly suggests abandonment despite the package not being deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but it provides no supporting evidence of an active user or contributor community.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. This is a maintenance and review gap, though it is less significant than the prolonged inactivity.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented. This adds a transparency gap for a package with no recent maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Anisimov Kostya

Direct Dependencies

DependencyLast ReleaseScore
doctrine/orm
Version ^2.10
—
—
symfony/flex
Version ^1.17
—
—
symfony/messenger
Version ^5.3
—
—
doctrine/doctrine-bundle
Version ^2.4
—
—
sipsystemgm/reader-manager
Version ^2.2
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform