4d47/php-start

Risky to depend on: the package has had no release or repository activity for about 12 years, leaving strong abandonment concerns. It is not deprecated or archived, and the source, license, and package contents are coherent, but those positives do not offset the lack of maintenance.

Latest 1.0.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both published in June 2014, with no release in roughly 12 years. This is strong evidence that the package is no longer actively maintained.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, following a last push in 2014. The long absence of activity creates a substantial abandonment risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but these numbers provide little evidence of an active user or maintainer community.

Repo tooling

Composer is used as the build tool, but no security scanning tooling is present. For a small 2014 starter project this is a transparency gap, though it is less significant than the prolonged inactivity.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's primary risk is its long-term lack of maintenance.