esd/pack-plugin

The MIT license, organization ownership, and small dependency set support transparency. The repository remains available and correctly named, but it offers little operational evidence beyond the source files.

Latest 0.11

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in June 2019, about 7 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having 11 historical releases.

Package scaffolding

The package has no README, tests, or changelog, which limits consumer guidance and verification. The missing tests and changelog are normal for a published artifact, while the exact-version GitHub release is a small positive.

Repo issue activity

There is one open issue and no issue or pull-request activity in the last month. This indicates little recent project engagement, although the small project size limits how much can be inferred from issue counts alone.

Repo popularity

The repository has 0 stars, 1 fork, and 2 watchers. Low popularity is supporting evidence rather than decisive on its own, but it provides little external validation for a package already showing prolonged inactivity.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, not a severe risk by itself.