agapofff/lightbox

It is clearly licensed, has a matching source repository, and keeps runtime dependencies minimal. There is no security policy, so maintenance and incident-response coverage are limited.

Latest v3.2.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 3 years and 8 months ago, with no releases in the last 12 months. This is a substantial maintenance concern for a dependency, despite six releases overall.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with no recent release activity. This indicates a real abandonment risk rather than merely a cosmetic metadata gap.

Project backing

The package and repository are owned by the same individual account, with no organization backing indicated. This is coherent ownership, but it also suggests limited maintenance capacity.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of community adoption or external maintenance capacity. Popularity is supporting evidence, so this is a caution rather than a verdict alone.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. The build setup is present, while the missing scanning coverage is a modest hygiene concern.