centraldesktop/stomp

It includes a README, tests, and a stable 2.0.3 release, while the organization-owned repository remains unarchived. The small dependency set and absent install scripts reduce operational concern, but do not offset the lack of recent maintenance.

Latest 2.0.3

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in June 2017, and there have been no releases in roughly 9 years. This is strong evidence that maintenance has stopped, despite the package having 17 historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no recent updates. The unarchived status does not compensate for the absence of activity.

Repo issue activity

There was no issue or pull request activity in the last month, with one issue still open. This adds modest abandonment concern but is weaker evidence than the long release and commit gap.

Repo tooling

The project uses Composer for its build, which is appropriate for a PHP package, but no security scanning tools were detected. The missing scanning is a hygiene gap, not the main adoption risk.

Security policy

The repository has no security policy. This reduces transparency around vulnerability reporting, though the larger concern remains the lack of observable maintenance.