Package Health/3slab/vdm-library-elastic-transport-bundle

3slab/vdm-library-elastic-transport-bundle

The beta label and license mismatch add uncertainty, while included tests and an organization-backed repository provide useful context. The package has no install scripts or deprecation notice, but its consumer documentation is thin.

Latest 2.0.0-beta1

Packagist

39%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only registry release, published about six years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the repository remaining available.

Repo commit activity

The repository recorded no commits or active maintainers in the last three months, and its last push was about four years ago. This substantially weakens confidence that defects or dependency changes will be addressed.

License

The artifact contains an MIT license file and the repository also has one, but the manifest declares the package proprietary while the detected license is MIT. That contradiction creates avoidable legal and provenance uncertainty.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap rather than a standalone adoption blocker.

Security policy

The linked repository has no security policy. For a transport library, this reduces transparency around vulnerability reporting, although it is not evidence of a security defect by itself.