Package Health

yasser-elgammal/green-core

Healthy and usable, with a concentrated maintenance risk. The package has frequent stable releases, recent commits, tests, changelog documentation, and an unarchived matching repository, but all recent commits come from one contributor and the repository has no security policy or scanning tools.

Latest v2.8.1PackagistPackagist

76%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The framework core declares 13 runtime dependencies spanning routing, HTTP, mail, database, console, validation, and configuration functionality. This breadth is expected for a framework core but increases the maintenance surface compared with a narrowly scoped library.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not offset by an evident organizational maintenance structure.

Repo bus factorcaution

One contributor made all 34 commits in the last three months, giving the project a bus factor of one. The individual-owned repository provides no organizational handoff compensation, so this is a meaningful continuity risk.

Repo commit activitycaution

The repository recorded 34 commits in the last three months, showing strong recent activity. However, this activity is concentrated in one maintainer, which reduces resilience if that person becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing automated security checks reduce transparency around dependency and build hygiene, without establishing that the release is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yasser Elgammal

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.7
—
—
symfony/mime
Version ^7.4
—
—
doctrine/dbal
Version ^4.4
—
—
predis/predis
Version ^3.5
—
—
symfony/mailer
Version ^7.4
—
—

Weekly Downloads

Info

Last Published
10 days ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform