beautinow/zipper

The Apache-2.0 license, bundled README, matching repository, and lack of install scripts are positive. Its security policy and automated security scanning are absent, leaving little evidence of ongoing care for a package with old PHP-era guidance.

Latest v1.0.4

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a substantial README and the repository has tests, but the README explicitly says the package is no longer actively maintained, was archived by its author, and should be swapped out. The absence of a changelog is normal for a published artifact and is not itself a concern.

Release history

The package has had no release in about five years: its latest release was June 7, 2021, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, confirming that the project is not receiving current maintenance. The repository's non-archived status does not compensate for the absence of actual activity.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. That leaves no provided evidence of automated vulnerability checks, although this is secondary to the project's inactivity.

Repository archived

The linked repository is currently reported as not archived, which is a small positive. However, its last push was in June 2021 and the package README says it was archived, so this status does not demonstrate active maintenance.