cohensive/boxberry-api

The MIT license, matching repository, and simple dependency set make the package straightforward to inspect and integrate. Its small codebase has no tests or security policy, leaving little evidence of ongoing quality or support.

Latest v2.0.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, while missing tests and a changelog are normal for published packages. The very short 67-character README provides limited consumer guidance, but this is secondary to the maintenance concern.

Release history

The package has six releases, but its latest release was in September 2018 and it has had no releases in the last 12 months. That long release gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the package having received no maintenance for years.

Repo tooling

Composer is used for the build, providing basic project tooling, but no security scanning tools are present. This is a modest hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, reducing transparency for reporting vulnerabilities. This adds a maintenance and disclosure gap, although it is less serious than the prolonged inactivity.