coco-project/csv-reader

The small codebase is licensed and includes tests, but it has no security policy and little visible community activity. No commits or releases have appeared since September 2024, so pin this version only where its limited maintenance needs are acceptable.

Latest v1.0.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about 2 years, with 0 releases in the last 12 months. Its four-release history shows an established stable version, but the long pause raises abandonment concerns.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap. This is a meaningful maintenance risk despite the repository not being archived.

Repo package mention

The repository name matches the package, which supports the link, but its README does not mention the package. That weakens package-to-repository transparency.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher, providing little evidence of external adoption or community support. Popularity is only supporting evidence, so this modestly lowers confidence rather than deciding the assessment.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a package intended to be used as a dependency.