gandung/topsis-fmadm

It has a clear BSD-3-Clause license, a usable README, and a small runtime dependency footprint. The repository is tiny and has no security policy or automated security scanning, so long-term support is difficult to verify.

Latest v1.0.1

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases, all concentrated in June 2017, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the short early release interval.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with a project that has received no recent development. This materially increases abandonment risk.

Repo popularity

The repository has 2 stars and 2 forks, indicating limited external adoption and review. Popularity is supporting evidence only, but it provides little compensating evidence for the maintenance gap.

Repo tooling

Composer is used for build and dependency management, but no security scanning tooling was detected. The missing scanning is a modest transparency and maintenance concern, not a standalone adoption blocker.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a genuine but secondary weakness for a small, inactive library.