cachethq/emoji

The repository includes tests, a clear license, and organization backing. It lacks security scanning, and current maintenance activity is absent, so pinning this old release deserves caution.

Latest v3.0.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates current maintenance has effectively stopped.

Release history

The latest release was published in November 2019, over six years ago, with no releases in the last 12 months. This is a substantial maintenance concern despite the package having three releases and a regular earlier cadence.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with two pull requests still open. This supports a picture of low current activity, though it is less decisive than the commit history.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap, not a standalone severe risk.

Security policy

The repository has no security policy. For a small package this is a modest disclosure-process gap, but it reduces transparency for reporting vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Cachet

Direct Dependencies

Dependency	Last Release	Score
league/commonmark Version ^1.0	—	—
illuminate/support Version ^5.5\|^6.0	—	—
illuminate/contracts Version ^5.5\|^6.0	—	—
graham-campbell/guzzle-factory Version ^3.0	—	—