district5/cache-lib

A security policy and automated security scanning are absent, while repository popularity is negligible. The documented package has tests, a matching MIT license, a small dependency set, and organization backing.

Latest 2.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than three years, with four releases since February 2021 and none in the last 12 months. This materially raises abandonment risk for a library dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates strongly diminished maintenance activity.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the maintenance concerns.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance concern, not evidence that the package is unsafe.

Repository archived

The linked repository is not archived, but its last push was in August 2023, so this signal does not offset the separate evidence of stale maintenance.