djthossi/url-parser

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the single-maintainer and inactivity concerns.

Release historycaution

The package has had only three releases, with the latest in June 2019 and none in the last 12 months, indicating prolonged inactivity. Its stable 1.2.0 release limits the concern for a small, focused parser but does not remove maintenance risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Repo popularitycaution

The repository has no stars and only one fork, so there is little community activity to compensate for the inactive maintainer. Low popularity is supporting evidence rather than a verdict by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a modest transparency and maintenance gap, not a standalone reason to reject this small package.