dmmcomlabo/dmm-sdk-v3

Risky to adopt for a new project: the package and repository have seen no release or commit activity for about eight years. It remains licensed, tested, and non-deprecated, but its maintenance appears effectively abandoned.

Latest v1.1.0

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases since March 2016, with no releases in the last 12 months and the latest release in August 2018—about eight years ago. This is strong evidence of abandonment risk, despite the package being mature enough to have a stable release.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. This materially lowers confidence that defects or compatibility problems will be addressed.

Repo popularity

The repository has 22 stars and 6 forks, indicating some external use but limited adoption. Popularity is only supporting evidence and cannot overcome the prolonged inactivity.

Repo tooling

Composer build tooling is present, but no security scanning tools are reported. This is a modest transparency and maintenance gap, though the absence of workflows means there is no observed workflow risk.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This matters more because the project also shows no recent maintenance activity.