bigbit/smart-di-slim

The MIT license, release notes, and matching repository improve transparency. Its small footprint and lack of security tooling leave limited evidence of ongoing support for a package with three runtime dependencies.

Latest v3.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in August 2019, and there have been no releases in roughly seven years. That strongly raises abandonment risk despite the stable current version.

Repo commit activity

There were no commits or active maintainers in the last three months, consistent with the repository's last push in 2019. This is strong evidence of a dormant project.

Project backing

The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the single-person project structure.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external validation or maintenance signal.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. This is a hygiene gap for supply-chain transparency, though it is less serious than the maintenance lapse.