emmtho/rss

The package is clearly identified, licensed, and accompanied by repository tests, while its dependency surface is small. Its maintenance and security transparency are too weak for a dependable current dependency.

Latest v0.1

Packagist

39%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo popularity

The repository has 0 stars, 1 fork, and 1 watcher. Popularity is only supporting evidence, but these counts provide little external evidence of adoption or community oversight.

Repo tooling

Composer is used for builds, but no security-scanning tools are present. This is a modest supply-chain hygiene gap rather than evidence of immediate unfitness.

Repository archived

The repository is not archived, which is a compensating signal, but it was last pushed about 11 years ago. The lack of recent repository activity still raises maintenance concerns.

Security policy

The repository has no security policy. For a package intended to be installed as a dependency, this reduces transparency around vulnerability reporting and maintenance response.