Package Health/devorto/dependency-injection

devorto/dependency-injection

The package is minimal, with no tests or security policy, so verification and maintenance visibility are limited. Its MIT licensing, stable 4.0.0 release, active repository status, and small dependency surface provide useful safeguards, but nearly two years without activity leaves adoption dependent on a small project.

Latest 4.0.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README and this version has a GitHub release, but the package and repository contain no tests; the missing changelog is normal packaging practice and is not a concern by itself.

Release history

The package has 16 releases since July 2019, but none in the last 12 months and its latest release was in November 2024, indicating a long maintenance pause.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release pause and increasing abandonment risk.

Repo tooling

Composer is used for the build, but no security-scanning tools are configured, reducing automated security coverage for this small dependency.

Security policy

The repository has no security policy, leaving no documented route for reporting vulnerabilities or explaining security practices.