tightenco/collect
The source includes tests, matches the package, and has a clear MIT license, while the stable release is well established. Unpinned workflow actions add a smaller reproducibility concern.
15%
Total Score
50
64
Health Score Breakdown
Packagist marks the entire package as abandoned and names illuminate/collections as its replacement. This directly indicates that new dependencies should move elsewhere.
The linked repository is archived, with its last push on January 14, 2024. An archived source project is a severe abandonment risk for a dependency.
The package has 336 releases and a historically frequent median interval of about 7 days, but its latest release was April 14, 2023, with no releases in the last 12 months. The long release gap indicates the earlier cadence no longer reflects current maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. This supports the broader evidence that active maintenance has ended.
The single workflow was fully analyzed with no injection or high-confidence audit findings, but both of its action references are unpinned. That creates a modest build-reproducibility and supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Taylor Otwell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/var-dumper Version ^3.4 || ^4.0 || ^5.0 || ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.