alva/csv-each

The package is small and easy to inspect, with tests, a matching repository, an MIT license, and only two runtime dependencies. Its maintenance has effectively stopped since December 2018, and the repository has no security policy or scanning, making long-term dependency risk substantial.

Latest 1.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has had only one release, on December 24, 2018, with no releases in the last 12 months. That indicates prolonged abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in December 2018. This confirms that the release-history gap reflects stopped development rather than only an infrequent registry cadence.

Repo popularity

The repository has zero stars, forks, and watchers, providing no community evidence to compensate for the absence of maintenance activity. Popularity is supporting evidence rather than the primary concern.

Repo tooling

Composer build tooling is present, but the repository has no security-scanning tools. That is a modest transparency and maintenance gap, especially for a package with no recent activity.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is secondary to the much stronger evidence of long-term inactivity.