alimousavi/filoquent

The package is clearly licensed, documented, stable, and directly backed by a matching repository with a small dependency surface. Maintenance has slowed substantially, with no recent commits or releases, and the project lacks security scanning and a security policy.

Latest v1.2.1

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last 12 months, this is the main abandonment concern.

Maintainers

One registry publishing account is listed, which creates a narrow publishing bus factor for a user-owned project. The matching repository provides some continuity but does not remove the concentration risk.

Release history

The package has 7 releases over about 2 years, but none in the last 12 months; the latest release was over 13 months ago. This indicates a meaningful maintenance slowdown for a library dependency.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.