deltachaos/example-529

Risky to adopt: this package has had no release or repository activity since July 2019, and its published artifact contains only composer.json. The install-time scripts and lack of security policy add operational concerns despite the MIT license and a non-deprecated repository.

Latest 0.9.1

Packagist

28%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package file tree

The artifact and linked repository each contain only composer.json, leaving no implementation, documentation, or supporting project files visible for review. This is a substantial transparency concern for a Symfony skeleton package.

Release history

The package has only two releases, both published in July 2019, with no releases in the last 12 months; this is strong evidence of abandonment for a dependency released nearly seven years ago.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in July 2019 and indicating no current maintenance capacity.

Lifecycle scripts

The package runs post-install and post-update scripts, increasing installation complexity and the consequences of depending on an old, minimally documented package.

Project backing

The package is backed by a personal user account rather than an organization, and the available activity shows no recent maintenance. There is no organizational backing to compensate for the inactive maintainer profile.