dougscabral/kalendorius

The package is small, licensed, tested, and has no install-time scripts, keeping its maintenance and integration surface straightforward. It lacks security scanning and relies on a single individual, so ongoing support may be limited.

Latest v1.4.3

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 11 years ago, with no releases in the last 12 months; the five-release history is concentrated in April 2015. This is strong evidence of abandonment risk, although the package is not deprecated.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with the long release gap and indicating little current maintenance capacity.

Repo popularity

The repository has only 2 stars and 1 watcher, offering little evidence of a broad support community; 20 forks provide limited counterevidence but do not establish active maintenance.

Repo tooling

Composer is used as a build tool, but no security-scanning tool is configured. The missing scanning is a modest hygiene concern rather than evidence that the release is unsafe by itself.

Security policy

The repository has no security policy, reducing transparency around vulnerability reporting and response. This matters, but it is less significant than the prolonged lack of maintenance.