gdbots/query-parser

Tests, release notes, and a matching Apache-2.0 license provide useful maintenance and transparency evidence. Organization backing and a small dependency footprint help, but no commits or releases since December 2021 materially increase abandonment risk; the repository also does not identify this package.

Latest v3.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 13 releases over more than 10 years, but has had no release in nearly five years and none in the last 12 months, indicating substantial abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository’s last push in December 2021 and a serious maintenance concern.

Repo issue activity

There was no issue or pull-request activity in the last month, with one open issue remaining; this adds modest evidence of a dormant project.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the link may be indirect or a monorepo relationship; this weakens source transparency.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The absence of scanning is a hygiene gap, not evidence that the package is unsafe.