Package Health

zbateson/mail-mime-parser

Healthy and suitable to depend on. It has a long release history, a recent stable release, active commits from two contributors, and matching source with tests. The main caveats are concentrated maintenance and missing security-policy and workflow permission declarations.

Latest 4.0.5PackagistPackagist

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Dependency profilecaution

Six runtime dependencies are a moderate dependency surface for a MIME parsing library; this is manageable but adds some transitive maintenance exposure.

Repo bus factorcaution

The primary contributor made 10 of 11 recent commits, so maintenance is concentrated. A second contributor was active during the same period, partially reducing the single-maintainer risk.

Repo issue activitycaution

The repository had one issue closed in the last month and no new pull requests, while 20 issues remain open. This is a minor maintenance concern, but not evidence of abandonment given the active commits and releases.

Repo toolingcaution

The repository uses Composer and Phing build tooling, but no security-scanning tools were detected. The build support is positive; the missing scanning coverage is a modest transparency gap.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations less explicit for a parser library.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-31286
zbateson/mail-mime-parser is vulnerable to CRLF Injection in versions 0.0.1 - 3.0.5 and 4.0.0 - 4.0.1.
0.0.1 - 3.0.54.0.0 - 4.0.1
High
AIKIDO-2026-323852
zbateson/mail-mime-parser is vulnerable to Uncontrolled Resource Consumption in versions 2.0.0 - 3.0.5 and 4.0.0 - 4.0.1.
2.0.0 - 3.0.54.0.0 - 4.0.1
High

Package versions

Maintainers

Zaahid Bateson
Contributors

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1|^2|^3
—
—
php-di/php-di
Version ^6.0|^7.0
—
—
guzzlehttp/psr7
Version ^2.5 || ^3.0
—
—
zbateson/mb-wrapper
Version ^2.0 || ^3.0
—
—
zbateson/stream-decorators
Version ^2.1 || ^3.0
—
—

Weekly Downloads

Info

Last Published
9 days ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform