tungtu/rialto
Manage Node resources from PHP
58%
Total Score
caution
No releases or commits in the past year leave this otherwise well-documented package with a meaningful maintenance risk.
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the registry's lack of releases in the last year. This is a meaningful maintenance and abandonment concern.
A post-install-cmd script runs during Composer installation. Install-time execution adds operational review cost, although this signal alone does not show malicious or unsafe behavior.
Only one registry publishing maintainer is listed, and project_backing identifies a user-owned repository rather than an organization. This creates a thin maintainer base with limited continuity.
Only two releases were published, with the latest 528 days ago and none in the last 12 months. The short 16-day interval between the two releases shows an initial launch but not sustained maintenance.
Composer build tooling is present, but no security scanning tools were detected. The build is supported, while security-process transparency is limited.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tung Tu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
clue/socket-raw Version ^1.2 | — | — |
symfony/process Version ^3.3|^4.0|^5.0|^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.