gnf/gnfcache

The package is tiny, clearly licensed, and has no install-time scripts. Its minimal documentation, absent security policy, and repository mismatch leave little support for future consumers.

Latest v0.1

Packagist

30%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a library dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the long release gap rather than showing ongoing maintenance.

Package scaffolding

The artifact includes a README, but it is only 26 characters and provides no meaningful consumer guidance. The absence of tests and a changelog is normal for a published artifact and is not counted against it.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the source relationship is less transparent even though the linked repository exists.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. The package's small size limits the significance but does not remove the transparency gap.