cartalyst/collections

Its BSD-3-Clause license, README, tests, changelog, and minimal dependency surface make adoption straightforward. The organization-backed repository is intact, but ongoing maintenance appears dormant, so future compatibility fixes may be limited.

Latest v2.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases have been published since February 2015, with no releases in the last 12 months and the latest release in February 2022. This is a meaningful maintenance concern, partly offset by the stable documented 2.0 release.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly four years since the last push and indicating dormant maintenance.

Repo issue activity

There is one open issue and no issue or pull-request activity in the last month, offering no evidence of active support.

Repo tooling

Composer is used for the build, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policy

The repository has no published security policy, leaving reporting and response expectations undocumented; the lack of recent activity makes this gap more relevant.