Package Health

yohanlaborda/behaviour

Clear licensing, tests, and a repository matching the package support straightforward use. However, the last release and repository push were nearly five years ago, with no recent commits or security scanning, so future compatibility and maintenance are uncertain.

Latest 1.0.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has 18 releases but none in the last 12 months, and its latest release was nearly five years ago. This is a substantial maintenance concern despite the earlier release history.

Repo commit activitycaution

The repository shows no commits and no active maintainers in the last three months, consistent with the long gap since the last release. The project is not archived, but current maintenance capacity is unproven.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 1 watcher, providing little evidence of external review or community support. Low popularity is supporting caution rather than a verdict by itself.

Repo toolingcaution

Composer is used for the build, which is appropriate for this PHP package, but no security scanning tooling is present. That is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a small, inactive package this reduces the available route for reporting vulnerabilities and adds to the maintenance uncertainty.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yohan Laborda

Direct Dependencies

DependencyLast ReleaseScore
phpstan/phpstan
Version ^1.2

Weekly Downloads

Info

Last Published
4 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform