Package Health/dflydev/composer-autoload

dflydev/composer-autoload

Risky to adopt: this package has had only one alpha release, with no new release or repository commits since January 2013. Its MIT license, tests, README, minimal dependencies, and organization-backed repository provide useful transparency, but the long abandonment risk outweighs those strengths.

Latest v1.0.0-alpha1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been only one release, published about 13 years ago, with no releases in the last 12 months. That strongly suggests the package is no longer actively maintained.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the measured three-month period, consistent with the last push being about 13 years ago. This is strong evidence of abandonment risk.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low figures provide no meaningful community-maintenance cushion.

Security policy

No security policy was found. This limits vulnerability-reporting transparency, although the absence of a policy is less important than the much larger maintenance concern.

Version stability

The only available release is v1.0.0-alpha1, explicitly pre-release rather than a stable production version. The README also warns that the API may change, increasing adoption risk.