Package Health/crustum/notification-seven

crustum/notification-seven

The repository includes tests, a clear MIT license, a useful README, and read-only workflow permissions. However, this is the only release after about 10 months, there were no commits in the last 3 months, the repository does not identify the package in its name or README, and all seven workflow actions are unpinned.

Latest 1.0.0

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, 1.0.0, published about 10 months ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months. The recent repository push prevents this from proving abandonment, but the lack of observed development lowers maintenance confidence.

Repo package mention

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked source repository specifically corresponds to this package.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear for an integration that handles an external SMS service.