bugbuster/easyupdate3

It has a clear LGPL license, readable documentation, a changelog, and a small runtime dependency set. The linked project is inactive and lacks security tooling, leaving little evidence of ongoing support.

Latest 3.5.4

Packagist

15%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because the registry itself signals that ongoing support should not be expected.

Release history

The latest release was in November 2020, and there were no releases in the preceding 12 months of collection. Nearly six years without a release strongly indicates abandonment, despite the earlier history of 18 releases.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, while its last recorded push was in June 2022. This confirms that maintenance has been stalled for more than four years.

Repo tooling

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest hygiene concern rather than evidence that the package is unsafe.

Security policy

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the package's abandonment signals.