cristianvuolo/helpers

Its stable major release and single runtime dependency limit compatibility surprises. The long maintenance gap, absent README, and lack of security tooling make this a risky dependency to adopt without taking ownership of it.

Latest 1.2.8

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than seven years, despite 17 releases overall; this is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in more than seven years.

Package scaffolding

The package has no README, while its lack of tests and changelog is normal for a published artifact. A GitHub release exists for this version, but it has no release notes to explain the changes.

Repo tooling

Composer is used for the build, but no security-scanning tool is configured. That weakens ongoing vulnerability detection for a package with no recent maintenance activity.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it does not by itself make the release unfit.