adnduweb/ci4_client

The package has a minimal two-file distribution, no tests, and no security policy. Its MIT declaration, matching repository, and release notes improve transparency, but no release or commit activity since July 2020 makes long-term maintenance unlikely.

Latest v1.0.2

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in July 2020, with no releases in the last 12 months. This is strong evidence of prolonged inactivity for a dependency released over six years ago.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of ongoing maintenance.

Lifecycle scripts

The package declares a post-update-cmd lifecycle script, which adds install-time behavior that consumers must account for. No evidence here shows that the script is harmful, so this is a hygiene concern rather than a severe risk.

Package file tree

The package contains only README.md and composer.json, indicating a very small distribution with little visible implementation or supporting material. This limits transparency and makes the package harder to evaluate.

Security policy

The linked repository has no security policy. For a small package this is a modest transparency gap, but it provides no documented channel for reporting vulnerabilities.