depa/depa-activerecord

Risky to adopt: this package has had no release or repository activity since February 2020, with no tests or security policy visible. Its MIT license, organization-backed repository, and matching source provide some transparency, but the long abandonment gap is a substantial liability.

Latest v1.0.3

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has only four releases, all concentrated around February 2020, and none in the last 12 months; the latest release was over six years ago. This strongly suggests the package is no longer actively maintained.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no recent maintenance capacity.

Package scaffolding

The package includes a README, but it is only 19 characters long, offering almost no guidance for consumers. Missing tests and a changelog in the published artifact are normal packaging practice, while the repository also reports no tests.

Repo popularity

The repository has zero stars, forks, and watchers, providing no community adoption signal to compensate for the absence of recent maintenance.

Repo tooling

Composer is used for builds, but no security scanning tools are present. This is a transparency and maintenance gap, though it is less serious than the package's prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
depa/depa-stdlib Version ^1.0	—	—
depa/depa-tooling Version ^1.0	—	—
laminas/laminas-db Version ^2.11	—	—
doctrine/collections Version ^1.6	—	—
laminas/laminas-diactoros Version ^2.2	—	—