ejsexton82/echosign

MIT licensing and a single runtime dependency make the package easy to integrate. The lack of tests, security policy, and active project tooling leaves maintenance and change safety largely unverified.

Latest v1.0

Packagist

39%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only one release, published in March 2018, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with a project that has not been maintained since its 2018 release.

Package scaffolding

A README and GitHub release are present, but the package and repository report no tests or changelog. Missing tests reduce confidence in safe maintenance, while the missing changelog is not unusual for a small published package.

Project backing

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the single-maintainer and inactivity concerns.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but these numbers provide no supporting evidence of active adoption or community maintenance.