bencagri/photon

The MIT license, clear README, and zero runtime dependencies make the package straightforward to inspect and integrate. Its small, stable artifact has no recent maintenance or security tooling, so future compatibility support is uncertain.

Latest 1.0.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only 3 releases, all clustered within about 4 hours in February 2018, with no release in roughly 8 years. This strongly indicates abandonment rather than an actively maintained project.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, and its last push was in February 2018. The long maintenance gap materially raises compatibility and abandonment risk.

Maintainers

Only one registry maintainer is listed, which leaves limited publishing continuity. The linked repository is also owned by that individual, with no provided evidence of broader backing.

Repo tooling

Composer is used as a build tool, but no security scanning tools are present. This is a maintenance and transparency gap, though it is less serious than the prolonged inactivity.

Security policy

The repository has no security policy. That limits documented reporting and response expectations, adding a modest transparency concern.