Package Health/andrisyahputra/php-composer-library

andrisyahputra/php-composer-library

Risky to adopt: the package has had no release or commit activity for about three years, and its linked repository does not match the package name. It also has no license or README, making long-term maintenance and responsible use harder to verify.

Latest 3.0.0

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has three releases, all clustered on September 11, 2023, with no releases in the last 12 months. This is strong evidence of a dormant release line, despite the stable 3.0.0 version.

Repo commit activity

The linked repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no releases for about three years. No provided signal demonstrates ongoing maintenance capacity.

Repo package mention

The linked repository is named php-composer-hello rather than php-composer-library, and the package name was not found in its README. This raises a concrete concern that the repository may not actually back this package.

License

No declared license and no license file were found in either the package or repository. That creates a real adoption and redistribution concern rather than a merely cosmetic metadata gap.

Package scaffolding

The package has no README, which is a consumer-facing transparency gap for a library, although it does have release notes for version 3.0.0 and the absence of tests or a changelog in the published artifact is normal packaging practice.