dawnstar/popup

The package is small and clearly mapped to its repository, with an MIT declaration and no install-time scripts. There is little evidence of ongoing care or security review, so pinning this old release carries maintenance risk.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published four years and nearly six months ago, with no releases in the last 12 months. That strongly limits evidence of continued maintenance.

Repo commit activity

The repository has recorded no commits and no active maintainers in the last three months, consistent with the release history's long period of inactivity.

Package scaffolding

The artifact has no README, tests, or changelog, but the source repository also shows no tests or changelog; the GitHub release flag is positive for release traceability. The missing consumer documentation is a minor concern, not an abandonment signal.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful external maintenance signal.

Repo tooling

Composer is used as the build tool, which is appropriate, but no security-scanning tools are present. The missing scanning is a modest review gap rather than evidence of unsafe code.