Package Health

vimeo/ablincoln

Risky to adopt: the package has had no release since February 2015 and no recent repository activity. Its name also borrows the identity of the much more established vimeo/psalm package, despite being unrelated, which increases dependency-selection risk.

Latest 1.0.0PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

56

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Name lookalikedanger

The package is reported to borrow the identity of vimeo/psalm, with borrows_lookalike_identity true. Although artifact overlap is zero and the README describes an experimentation library, the strong naming signal means consumers could select it while intending the far more established vimeo/psalm.

Release historydanger

The package has only four releases and none in the last 12 months; its latest release was about 11 years ago, indicating severe abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long-standing maintenance gap.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with unresolved issues and pull requests still present; this suggests an inactive project rather than active support.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a transparency gap, though it is secondary to the package's much older maintenance concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alex Kalicki
Jacob Oliver

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ~1.0
monolog/monolog
Version ~1.0

Weekly Downloads

Info

Last Published
11 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform