chadicus/psr-middleware

Usable with caveats: this is a small, clearly identified MIT package with a simple dependency profile and a documented release. However, it has had no release or commit activity for over three years, so maintenance appears dormant.

Latest v1.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases and none in the last 12 months; its latest release was over three years ago. That is a meaningful maintenance concern, although the package is small and narrowly scoped.

Repo commit activity

There were no commits and no active maintainers in the last three months, following more than three years without a release. This indicates dormant maintenance and increases the risk that compatibility issues will remain unresolved.

Repo issue activity

The repository has two open issues and no issue or pull-request activity in the last month. The small issue count is not severe, but the absence of recent activity reinforces the maintenance concern.

Repo popularity

The repository has only two stars, one fork, and no watchers. This is weak supporting evidence for project maturity, though low popularity alone is not a reason to reject a small foundational interface.

Repo tooling

Composer is used as a build tool, but no security scanning tool is configured. For this tiny package the missing scanner is a hygiene gap rather than a severe supply-chain risk.