avro/blog-bundle

The package has tests, a changelog, a matching MIT license, and no install-time scripts. Its very small user base, absent security policy, and minimal repository tooling provide little reassurance for a project that has not been maintained for years.

Latest v0.2.1

Packagist

34%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both from January 2013, with no release in over 13 years. This is strong evidence of abandonment for a dependency that may need compatibility and bug fixes.

Repo commit activity

There were 0 commits and 0 active maintainers in the last three months, consistent with the repository's last push being over 13 years ago. This materially increases abandonment risk.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, indicating very limited adoption and little supporting community evidence. Popularity is only supporting evidence, so this reinforces rather than determines the result.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. That leaves a meaningful transparency and maintenance-control gap.

Repository archived

The repository is not archived, which is a modest positive, but its last push was over 13 years ago and does not offset the lack of active maintenance.