ganuonglachanh/sonic

The package has a clear license, README, focused dependencies, and release notes for this version. Its single-user project has had no commits or issue activity for over two years and has no security scanning or policy, so future compatibility support is uncertain.

Latest 0.1.9

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed. The repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops supporting the package.

Release history

The package has six releases, but none in the last two years; the latest release was published in February 2024. This materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. That weakens evidence of ongoing maintenance.

Repo issue activity

There were no new or closed issues and no merged pull requests in the last month, with two issues still open. This is limited evidence of current project support.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.