decole/yr-no

The README and release notes provide useful integration context, and the repository is not archived. However, the project lacks a security policy and automated security scanning, making an aging client harder to trust and maintain.

Latest 1.0.1

Packagist

46%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published nearly five years ago, with no releases in the last 12 months. That strongly raises abandonment and compatibility risk despite the repository remaining available.

Repo popularity

The repository has zero stars, one fork, and one watcher, providing little independent evidence of adoption or community support. Popularity is only supporting evidence, so this modestly reinforces the maintenance concern.

Repo tooling

Composer is used for builds, but no security-scanning tools were detected. For a client library that handles remote API responses, this is a modest transparency and maintenance gap.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a hygiene concern, though it is less significant than the lack of recent maintenance evidence.