divyasunarc/demo

Risky to adopt: this package has had only one release, with no new releases or repository commits since November 2021. It is not deprecated or archived, but its six-character README and minimal three-file project provide little evidence of ongoing maintenance or consumer guidance.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been exactly one release, published in November 2021, and none in the following roughly four years and ten months. This is strong evidence of an unmaintained package rather than a mature release history.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the long period since its only release. This materially increases abandonment risk.

Package file tree

The artifact and repository each contain only three files, including a minimal README, composer manifest, and registration file. That may fit a small extension, but it leaves little visible project structure to support confidence in long-term maintenance.

Package scaffolding

The package includes a README, but it is only six characters long and gives consumers virtually no integration guidance; the absence of tests and a changelog is normal for a published artifact and is not penalized.

Repo tooling

Composer is used as a build tool, which is appropriate for a Packagist package, but no security scanning tooling is present. This is a modest transparency gap, not by itself evidence that the package is unsafe.