abryrath/craft-sync-db

The MIT license and absence of install-time scripts are reassuring. The package includes its source and a changelog, but its README still contains placeholder sections and no security policy is provided.

Latest v0.4.0

Packagist

37%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in February 2019, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk despite an initially regular release interval.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the last push occurring over seven years ago. The repository is not archived, but that does not compensate for the prolonged inactivity.

Package scaffolding

A README and changelog are present, and the absence of tests in the published artifact is normal packaging practice. However, the README contains multiple placeholder sections, reducing transparency for consumers.

Repo tooling

The repository uses Composer, which supports reproducible dependency management, but no security-scanning tooling was detected. This is a maintenance and transparency gap rather than evidence of unsafe behavior by itself.

Security policy

No repository security policy was found, leaving vulnerability reporting expectations unclear. This adds a modest transparency concern alongside the broader signs of inactivity.