Package Health

torvic/ddd-common

The source includes a useful test suite and uses Composer for reproducible dependency management. Documentation and security-process coverage are thin, while the package shows little evidence of ongoing care. Adopt only if you can accept maintaining an old, unlicensed library yourself.

Latest v1.0.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

38

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

This is the package's only release, published in October 2019, with no releases in the last 12 months. That long period without a new version is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in April 2020. The non-archived status does not compensate for this sustained inactivity.

Licensecaution

Neither the package nor the linked repository declares or contains a recognized license. For a library intended for dependency use, this creates a material legal and adoption concern.

Package scaffoldingcaution

The package contains tests, which supports basic maturity, but it has no README or changelog. The missing README is a real consumer-documentation gap for a library, while the tests partly compensate for the missing project scaffolding.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. This is a transparency and maintenance gap, though it is less serious than the package's inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Torvic Team

Direct Dependencies

DependencyLast ReleaseScore
doctrine/orm
Version ^2.6
cocur/slugify
Version ^3.1
jms/serializer-bundle
Version ^2.4

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform