byteq/digest-url

The MIT license, focused dependency footprint, matching repository, and lack of install-time scripts improve transparency and reduce complexity. However, the single release dates to August 2018, and the minimal documentation and absent security policy leave substantial maintenance and support concerns. Pin this version only when its old Craft CMS target is acceptable.

Latest 2.0.0

Packagist

40%

Total Score

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published in August 2018, with no releases in the last 12 months. The long period without a new release is strong evidence of abandonment risk.

Package scaffolding

A README and changelog are present, and the changelog is appropriate source-project documentation. The README is only 763 characters and leaves configuration and usage sections as placeholders, which weakens consumer support; absent tests in the published artifact is normal.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide little supporting evidence of community review or adoption.

Repository archived

The repository is not archived, which is a positive, but its last push was also in August 2018. That does not offset the evidence of prolonged inactivity.

Security policy

The repository has no security policy. For a package with no recent maintenance activity, this leaves no clear process for reporting or handling vulnerabilities.