colinmollenhour/modman

The focused five-file artifact includes a useful README and avoids install-time scripts or registry deprecation. Missing security tooling and policy reduce transparency for future support, while the stable package structure limits the practical impact.

Latest 1.14

Packagist

60%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in February 2021, with no releases in the last 12 months. This is a meaningful maintenance concern, although the package has an established release history with 11 releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. That weakens confidence in ongoing fixes and support.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 17 issues and 2 pull requests remain open. This suggests limited current project activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance weakness rather than evidence that the package is unsafe.

Security policy

The linked repository has no security policy. For a deployment-oriented command-line utility, that leaves vulnerability reporting and response expectations undocumented.