Package Health

umbrellio/php-deploy

The MIT license, included tests, and release notes provide useful transparency, while Dependabot and Composer tooling support routine maintenance. However, the release is marked abandoned and its linked repository does not identify or mention this package, so pinning it needs strong justification.

Latest 5.0.0PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and points to a replacement repository, which is a direct warning against taking a new dependency on this package.

Release historycaution

The package has existed since January 2021 with 19 releases, but only one release in the last 12 months; the recent release partly offsets the otherwise thin current cadence.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating no recent development activity despite a recent registry release.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package, raising uncertainty about whether it is the actual source project rather than a repository used by another package.

Security policycaution

The repository has no security policy, reducing disclosure transparency for a package that can affect application database migrations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Art4es
Korben Dallas

Direct Dependencies

DependencyLast ReleaseScore
illuminate/console
Version ^11.0 | ^12.0 | ^13.0
—
—
illuminate/support
Version ^11.0 | ^12.0 | ^13.0
—
—
illuminate/database
Version ^11.0 | ^12.0 | ^13.0
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform