cybage/storepickup

The package includes a usable README and changelog, has a stable 1.0.0 release, and uses only one runtime dependency. Its license is neither declared nor detected, and the repository has no security policy or security scanning, leaving important transparency gaps.

Latest 1.0.0

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about 7 years ago, with no releases in the last 12 months. That strongly raises abandonment risk, although the linked repository remains available.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with the long gap since the last repository push. This materially increases the risk that compatibility and defects will go unaddressed.

License

No license is declared, no license file was detected, and no repository license file was found. The README claims OSL 3.0, but that unverified text does not establish a license for the release.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no visible community support to compensate for inactivity.

Repo tooling

Composer is used as a build tool, but no security scanning tool is configured. The build setup is appropriate, while the missing scanning is a minor hygiene gap given the package's age and inactivity.