Package Health/fashionforhome/s3fileshifter

fashionforhome/s3fileshifter

The package has a clear README, GPL-3.0 license, tests, and release notes, with a repository that matches the package and is backed by an organization. Its maintenance and security oversight are weak, with no recent activity or security scanning.

Latest 1.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in February 2016, with no releases in the past 12 months. This is strong evidence of abandonment for a dependency that may need compatibility or security updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package having been untouched for about 10 years. The non-archived status does not compensate for the absence of observed maintenance.

Repo popularity

The repository has one star, no forks, and seven watchers. Low popularity is supporting evidence rather than decisive on its own, but it provides little external adoption signal to offset the long inactivity.

Repo tooling

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, especially alongside the lack of recent activity.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters more for a tool that transfers files between a server and S3.