sonata-project/cache
The release has clear MIT licensing, repository tests, changelog coverage, and release notes for this version. Workflow checks still show unpinned images and an archived action, while security-policy coverage is absent.
12%
Total Score
67
100
57
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided; this is a direct warning against taking a new dependency on it.
The package has had no release in about 5 years and none in the last 12 months, which strongly indicates abandonment rather than merely a slow release cadence.
The linked repository is archived, and its last push was about 4 years ago, indicating the project is no longer actively maintained.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the archived project state.
There were no new or closed issues or pull requests in the last month; this is consistent with an inactive project, though the repository's zero open items is not itself harmful.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thomas Rabaix |
| Sonata Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.