davidiwezulu/audittrail

The package includes tests, a substantial README, a matching MIT license, and no install-time scripts. Its small project footprint and lack of security scanning leave less evidence for long-term maintenance, while the single release and no recent commits remain the main concerns.

Latest v1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been only one release, published over two years ago, with no releases in the last 12 months; this is meaningful evidence of inactive maintenance.

Maintainers

One individual has registry publish access. That is not inherently unhealthy, but it leaves limited visible maintainer capacity for a package with no recent release or commit activity.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, reinforcing the lack of recent maintenance activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap, partly offset by the package's small, transparent file tree.

Security policy

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities; this is a transparency gap, though not evidence of a defect.