emsa/comment

MIT licensing, a matching repository, tests, and no install-time scripts provide useful transparency. The dependency set is sizable for a narrowly scoped module, increasing upgrade coupling in the surrounding Anax stack.

Latest v3.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was in May 2018, and there have been no releases in roughly eight years. Four releases over the package's lifetime show an established release history, but the prolonged gap indicates abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release gap and providing no evidence of current maintenance.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external sign of adoption or community support.

Repo tooling

The project uses Make and Composer, showing basic build tooling, but no security-scanning tool was detected. That is a modest hygiene gap for a package with no recent maintenance evidence.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the absent maintenance activity.