andyleap/popple

Risky to adopt: the package has had no release or repository activity for about 13 years, leaving it effectively unmaintained. It has a clear README, tests in the source repository, and minimal dependencies, but those positives do not offset the abandonment risk.

Latest 0.2.0

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in August 2013, with no releases in the last 12 months. This long release gap is strong evidence of abandonment for a dependency that may need fixes or compatibility updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance capacity.

Project backing

The registry namespace and repository owner match, providing consistent ownership evidence. The owner is an individual account, so there is no organization backing to offset the maintenance concerns.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but it provides no supporting evidence of an active user or contributor community.

Repo tooling

Composer is used for builds, but no security scanning tooling is present. This is a transparency and maintenance gap, though the absence is less severe for this small, old package than the lack of ongoing development.