george-t/common_lib

It has a clear MIT license, a short README, tests, and a small dependency footprint. Maintenance stopped in July 2020, and the repository has no security scanning, so future fixes and oversight are uncertain.

Latest v1.6

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no release in more than six years: its latest release was July 16, 2020, despite seven releases overall. This is a substantial maintenance concern for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since the last release. The non-archived status does not compensate for the lack of observed activity.

Repo popularity

The repository has 0 stars and 0 forks, with only 2 watchers. Low popularity is supporting evidence rather than decisive, but it provides little indication of a broader community that could help sustain the package.

Repo tooling

Composer is used as the build tool, which fits the package, but no security scanning tools are present. That leaves a maintenance and oversight gap, especially for a package with no recent activity.

Security policy

No security policy is present in the repository. This limits guidance for reporting vulnerabilities, though it is a transparency gap rather than evidence that the package is unsafe.