Package Health

tareqas/psym

It has a clear README, tests, release notes for this version, and matching MIT licensing. The lone maintainer and missing security policy limit confidence for a tool that runs project code.

Latest v1.0.4PackagistPackagist

63%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The latest release was 2024-11-21, with no releases in the last 12 months despite five releases overall; this is a meaningful maintenance concern, though the package has a stable release history rather than being abandoned from inception.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 22-month gap since the latest release and increasing abandonment risk.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, but it is not evidence of a security incident by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tareq Ahamed

Direct Dependencies

DependencyLast ReleaseScore
psy/psysh
Version ^0.11
—
—
phpstan/phpdoc-parser
Version ^1.30
—
—
jetbrains/phpstorm-stubs
Version @dev
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform