ecomdev/reactive-socket

Usable with caveats: it has a clear MIT license, matching repository, tests, changelog, and a stable release, but development appears to have stopped in October 2018. Install-time scripts and the absence of security tooling or a security policy add maintenance risk.

Latest 1.1.1

Packagist

57%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package defines post-install and post-update scripts, which increase installation complexity and supply-chain exposure compared with a package without lifecycle hooks.

Release history

The package has had no release in nearly eight years and none in the last 12 months, indicating that it is no longer actively maintained despite four historical releases.

Repo commit activity

There were no commits or active maintainers in the last three months, and the repository's last push was in 2018, leaving current maintenance capacity un demonstrated.

Repo popularity

The repository has one star, no forks, and no watchers. This is weak supporting evidence, but low popularity alone does not make a small, otherwise coherent package unsafe to use.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured, leaving a transparency and maintenance gap.