Package Health

zhoxife3ng/restcord

The single-person maintainer base and zero repository activity leave little visible capacity for ongoing fixes. Missing security tooling and policy add transparency concerns, although the package is licensed, documented, and not deprecated or archived.

Latest 0.5.1PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was in January 2022, with no releases in the last 12 months; this is strong evidence of prolonged inactivity for a library dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases and indicating likely abandonment.

Maintainerscaution

Only one registry account has publishing access, leaving a thin release-maintainer base; this is more concerning alongside the observed inactivity.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected, leaving dependency and code security hygiene less transparent.

Repository archivedcaution

The linked repository is not archived, but its last push was in January 2022, so the non-archived status does not compensate for the stale activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aaron Scherer

Direct Dependencies

DependencyLast ReleaseScore
monolog/monolog
Version ^1.22|^2.0
guzzlehttp/guzzle
Version ^6.3
netresearch/jsonmapper
Version ^1.4
symfony/options-resolver
Version ^2.6|^3.0|^4.0|^5.0
guzzlehttp/guzzle-services
Version ^1.0

Weekly Downloads

Info

Last Published
4 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform