backendtea/un-poly-ctype

Its MIT license, matching repository, and lack of install scripts make the small artifact straightforward to inspect. The one-person project has little supporting activity or security process.

Latest 1.0.0

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about eight years ago, with no releases in the last 12 months. This strongly raises abandonment risk, although a deliberately small package may not need frequent feature releases.

Repo commit activity

The repository has had no commits and no active maintainers in the last three months, consistent with the long release gap. There is no provided evidence of current maintenance capacity.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, so there is little community evidence to compensate for the lack of recent activity. Low popularity alone is not disqualifying for a small package.

Repo tooling

The repository uses Composer, which fits the package ecosystem, but it has no security scanning tools. The missing scanning is a modest process gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a dependency, though it does not by itself show a security defect.