bickmista/spurl

The README, tests, and MIT declaration make the package understandable and straightforward to integrate. Its small dependency footprint is helpful, but the project shows no recent maintenance or security tooling.

Latest 0.3.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in September 2015, and there have been no releases in the last 12 months. This long period without updates is strong evidence of abandonment risk, although the package is not marked deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity for roughly 11 years. The inactive repository is not archived, but that does not compensate for the lack of maintenance.

Repo tooling

Composer is used for the build, but no security-scanning tool is configured. That weakens ongoing assurance, while the package's simple dependency profile limits the scope of the gap.

Security policy

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious for a small, stable URL library than for a security-sensitive package.