cyphrix/random-org

The package has a clear README, an MIT declaration, and only one runtime dependency. It lacks tests and security tooling, so maintenance changes would be hard to validate.

Latest 0.9.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both on January 28, 2016, with no releases in the last 12 months. That long release gap is strong evidence of abandonment risk, despite the package not being deprecated.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, after last being pushed in January 2016. This indicates that defects and compatibility issues are unlikely to receive attention.

Repo tooling

Composer is used for the build, providing basic project tooling, but no security scanning tools are configured. For a package handling an API key, that leaves a meaningful validation gap.

Repository archived

The repository is not marked archived, which is a compensating positive, but its last push was in January 2016. The inactive repository still creates a substantial maintenance concern.

Security policy

The repository has no security policy. This reduces transparency about how vulnerabilities should be reported, although the absence is less significant than the prolonged inactivity.