8ctopus/nano-timer

The project has stopped committing recently and its workflows use nine unpinned actions. Clear licensing, tests, a matching repository, and a recent release provide useful reassurance despite its very small community.

Latest 4.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry and repository are owned by the same individual account, so the package has direct ownership continuity but no organizational backing to provide maintainer redundancy.

Release history

The package has 29 releases over about 3 years, but only one release in the last 12 months; this suggests slowing maintenance rather than abandonment, especially because the latest release is recent.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, which is a meaningful maintenance concern, although the repository was updated with the latest release shortly before this period.

Repo popularity

The repository has one star and no forks, indicating a very small user and contributor community; popularity is supporting evidence, but this alone does not make the package unsafe.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured; this is a modest transparency and maintenance gap rather than a severe risk.