Package Health/blackridgesoftware/dummy-pkg

blackridgesoftware/dummy-pkg

The package is licensed and has no install-time scripts, but documentation and repository security practices are thin. Its tiny artifact may be intentional, yet maintenance and repository identity remain weak.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about five years ago, with no releases in the last 12 months. That provides strong evidence of abandonment risk for a dependency expected to receive maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance capacity.

Package scaffolding

The artifact has no README, tests, or changelog. The missing tests and changelog are normal for published artifacts, but the missing README reduces consumer transparency for a Composer package.

Repo package mention

The repository name does not match the package name, and no README mention was available. This raises concern that the linked repository may not clearly belong to the published package.

Repo tooling

Composer is used as the build tool, which fits the ecosystem, but no security scanning tooling was detected. That is a supporting hygiene gap rather than evidence of unsafe behavior by itself.