dbemfica/cnab_yaml

The artifact includes a clear README, MIT license file, and no install-time scripts. Its tiny repository footprint and lack of security tooling provide little reassurance for a package that has not been maintained for years.

Latest 1.3.0

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly 10 years: its latest release was in November 2016, with zero releases in the last 12 months. This is strong evidence of abandonment despite 13 historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of current maintenance.

Project backing

The package and repository are owned by the same individual account rather than an organization. That is coherent ownership, but it provides no broader organizational backing to compensate for inactivity.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful community-maintenance buffer.

Repo tooling

Composer is used as a build tool, but the repository reports no security-scanning tools. That missing security hygiene is a minor concern, especially alongside the absence of current maintenance.