devfactory/minify

Documentation and licensing are in place, and the repository is backed by an organization with a matching package. Maintenance has paused since February 2025, with no commits or issue movement in the measured periods; the missing security policy adds a smaller transparency concern.

Latest 2.0.2

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 18 releases over more than 11 years, but none in the last 12 months; its latest release was in February 2025. This indicates a mature but currently inactive release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months. Combined with the February 2025 last push, this is a meaningful abandonment risk.

Repo issue activity

There were no new or closed issues and no merged pull requests in the last month, while 13 issues and 3 pull requests remain open. This shows little current project movement.

Repo tooling

Composer is used as the build tool, but no security scanning tooling is present. The missing scanning is a modest hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no published security policy. For a package that processes application assets, this reduces transparency about reporting and handling vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Da Costa Alcindo

Direct Dependencies

Dependency	Last Release	Score
natxet/cssmin Version 3.*	—	—
tedivm/jshrink Version ~1.0	—	—
illuminate/support Version ^10.0\|^11.0\|^12.0	—	—
illuminate/filesystem Version ^10.0\|^11.0\|^12.0	—	—