gpslab/image-meta

The package is focused, documented, tested, and has a minimal dependency footprint. Its organization-backed repository remains available, but ongoing maintenance appears limited and there is no security policy.

Latest v3.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was in October 2017, with no releases in the past 12 months and only three releases overall. This is a substantial maintenance concern for a library dependency, though the stable v3.0.0 release and release notes provide some maturity evidence.

Repo commit activity

There were no commits and no active maintainers in the past three months. Combined with the old release history, this indicates likely abandonment or very limited ongoing maintenance.

Repo tooling

Composer is used as the build tool, showing basic project tooling, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap.

Repository archived

The linked repository is not archived, but its last push was in January 2020. Continued availability is positive, while the old last-push date reinforces the maintenance concern.

Security policy

The repository has no security policy. For a small library this is not severe on its own, but it leaves vulnerability reporting and response expectations undocumented.