wenke-chen/messenger-monitor-bundle
It includes a real test suite, MIT licensing, and a matching repository, but its development-phase status and lack of recent activity reduce confidence in long-term support. The CI workflow also uses a floating container image, adding avoidable build uncertainty.
38%
Total Score
0
79
100
Health checks
The package has had no release in more than four years; its latest release was in December 2021, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite four historical releases.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
Version 0.2.2 is not a stable-major release, so the package remains early-stage and may carry compatibility risk. Its non-prerelease status provides only limited compensation.
The complete workflow audit found a high-confidence use of a floating latest container image. No dangerous trigger, untrusted checkout, or script injection was found, so this is a hygiene concern rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Wenke Chen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2.10|^3.0 | — | — |
symfony/config Version ^4.4|^5.0 | — | — |
symfony/routing Version ^4.4|^5.0 | — | — |
symfony/messenger Version ^4.4|^5.0 | — | — |
symfony/http-kernel Version ^4.4|^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.