duplo/flash

The package is small and clearly licensed, with repository tests and no install-time scripts. Its single release was published over 11 years ago, and the linked project has almost no adoption or recent activity, making abandonment the main concern.

Latest v1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, with no releases in the last 12 months, and that release was published over 11 years ago. The long period without a new release is strong evidence of abandonment risk.

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not benefit from visible organizational backing. This is consistent with the weak activity evidence.

Repo issue activity

There are no open issues or pull requests and no recent activity. While this could mean the package is stable, it provides no evidence of ongoing maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but these counters provide little evidence of an active user or contributor community.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. The missing scanning is a modest transparency gap rather than a severe dependency risk.