uma/psr7-hmac-bundle
The source includes tests, release notes, a matching MIT license, and no install-time scripts. Its small dependency footprint and documented repository provide limited reassurance, but they do not offset the lack of current maintenance.
8%
Total Score
0
100
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on the release.
The package has five releases, but none in the last 12 months; its latest release was in April 2017. This indicates prolonged inactivity rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its archived state. There is no observed maintenance capacity for current fixes.
The linked repository is archived, and its last push was more than five years ago. Archived source is a severe abandonment risk for a security-related integration bundle.
The repository has no security policy. For an authentication bundle, that reduces transparency around vulnerability reporting and response.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 uma/psr7-hmac Version 0.6.0 | — | — |
symfony/config Version ^2.7|^3.0 | — | — |
symfony/http-kernel Version ^2.7|^3.0 | — | — |
symfony/security-bundle Version ^2.7|^3.0 | — | — |
symfony/dependency-injection Version ^2.7|^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.