blackbonjour/to-array

The release has tests, release notes, an MIT license, and only one runtime dependency. Its tiny, inactive project has little recent activity and no security policy, so future fixes and support are uncertain.

Latest 1.1.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases, and its latest release was about 7 years ago with no releases in the last 12 months. This indicates a likely-maintained-at-release but inactive project, though the package is not deprecated.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the latest push being about 7 years ago. This materially raises abandonment and support risk.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, showing a very small user and contributor footprint. Popularity is only supporting evidence, but this provides little evidence of a durable maintenance community.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a modest transparency gap rather than a severe risk.

Security policy

The repository has no security policy, leaving no stated channel or process for reporting vulnerabilities. This is a hygiene and response-readiness gap, not evidence of a vulnerability.