allegro-php/primitives

Documentation and licensing are clear, and installation does not run package scripts. The project lacks a security policy and automated security scanning, while its small community offers limited supporting evidence.

Latest 0.2.0

Packagist

54%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, and the repository was last pushed on December 21, 2023. This is strong evidence that maintenance has effectively stopped.

Release history

The package has only 2 releases across 2090 days, with no releases in the last 12 months and a median interval of about 1081 days. This indicates slow maintenance and lowers confidence in timely fixes.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little independent evidence of broad use or community support. Low popularity alone is not disqualifying, but it reinforces the maintenance concern.

Repo tooling

Composer is used for project builds, but no security scanning tools are configured. That is a transparency and hygiene gap for a dependency intended to be used in applications.

Security policy

The repository has no security policy. This makes vulnerability reporting and response expectations unclear, especially given the absence of recent activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dmitrii Polishchuk

Direct Dependencies

Dependency	Last Release	Score
ffi/proxy Version ^1.0	—	—
ffi/location Version ^1.0	—	—
ffi/preprocessor Version ^0.2.2	—	—
psr/simple-cache Version ^3.0	—	—
allegro-php/allegro Version ^0.2	—	—