dprmc/vcon

The package is licensed, tested, small in scope, and clearly tied to its repository. Its maintenance record is too stale for confidence in fixes or compatibility, despite no deprecation or archive flag.

Latest v1.4

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no release in more than nine years, with no releases in the last 12 months. This is a substantial abandonment concern, although five historical releases show it was once maintained.

Repo commit activity

There have been no commits or active maintainers in the last three months, consistent with the last repository push being more than nine years ago. This materially increases abandonment risk.

Repo issue activity

There are no open issues or pull requests, but there is also no recent issue or pull-request activity to demonstrate ongoing maintenance.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though the package's small scope limits its weight.