Package Health

tomcizek/symfony-prooph

The package includes tests, documentation, a matching MIT license, and no install-time scripts. Its long inactivity makes future compatibility and maintainer response uncertain; pinning this exact version is safer than relying on ongoing support.

Latest 2.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The latest release was published in December 2017, and there have been no releases in nearly nine years. The four releases arrived quickly at first, but the prolonged gap is strong abandonment evidence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package having been inactive for nearly nine years. No newer release activity compensates for this.

Dependency profilecaution

The package declares nine runtime dependencies spanning several Prooph components, creating a comparatively broad compatibility surface for an old, inactive bundle. The dependencies are explicit rather than hidden, which limits but does not remove the maintenance concern.

Repo popularitycaution

The repository has four stars, zero forks, and three watchers, indicating limited independent adoption and review. Popularity is supporting evidence only, but it offers little compensating evidence for the maintenance gap.

Security policycaution

The linked repository has no security policy. This is a transparency and incident-handling gap, although the package's inactivity and small scope make it less important than the lack of current maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tomáš Čížek

Direct Dependencies

DependencyLast ReleaseScore
psr/container
Version ^1.0
—
—
prooph/event-store
Version ^7.2
—
—
prooph/service-bus
Version ^6.0
—
—
prooph/event-sourcing
Version ^5.2
—
—
prooph/pdo-event-store
Version ^1.5
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform