dbeurive/input

Its README, tests, and license make the small codebase straightforward to inspect. However, the lone maintainer and absent security tooling leave little evidence of ongoing care.

Latest 1.0.1

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 10 years ago, with only two releases overall and none in the last 12 months. This is strong evidence of abandonment risk despite the package's stable age.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old last release, this materially increases abandonment risk.

Maintainers

Only one registry publishing maintainer is listed, leaving a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader institutional support.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but these counters provide little supporting evidence of community adoption.

Repo tooling

The project uses Make and Composer, but no security scanning tools were detected. This is a maintenance and transparency gap, though it is less serious than the long period of inactivity.