codeq/form

It is licensed, has one runtime dependency, and uses no install-time scripts. The artifact is small and documented, but its project history provides little evidence of ongoing support.

Latest v1.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published on 2017-11-26 and none in roughly 8 years and 10 months. This is strong evidence of abandonment for a dependency, despite the package not being formally deprecated.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release hiatus. No newer activity is provided to offset that maintenance concern.

Repo package mention

The linked repository name does not match the package name, and its README does not mention the package. That makes the source association less transparent and raises concern that the repository may not belong to this package.

Repo popularity

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive for a small package, but these counters provide no supporting evidence of an active user or contributor community.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest hygiene gap rather than evidence that the release is unsafe by itself.