felixf/fireblock-image

The package has no newer release and no commits in the last three months, so fixes and updates may be slow. Its MIT declaration, matching repository, small dependency set, and lack of install scripts provide useful transparency and limit operational risk.

Latest 1.0.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by individual accounts rather than an organization. That is consistent with a small personal package, but it provides less visible institutional backing.

Release history

There has been only one release, 1.0.0, published about 16 months ago, with no releases in the last 12 months. This materially weakens evidence of ongoing maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers over the last three months, indicating no recent development activity. The repository is not archived, but that does not compensate for the absent recent activity.

Repo tooling

Composer is used as the build tool, but the repository has no security scanning tools. The missing scanning is a modest transparency gap rather than a severe risk for this small package.

Security policy

The repository has no security policy. That leaves vulnerability-reporting expectations unclear, although the package's small scope and other transparent signals partly offset the gap.