graham-campbell/binput

It has a long release history, a stable version, tests, release notes, and matching MIT licensing, but current maintenance capacity is absent. Adopting it would leave you without an actively maintained upstream.

Latest v11.1.0

Packagist

14%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names voku/anti-xss as its replacement. This is a direct warning against taking a new dependency on this release.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. This confirms there is no current maintenance activity to offset the abandonment signals.

Repository archived

The linked repository is archived, indicating the project is no longer intended for active maintenance. A push in March 2025 does not compensate for the repository's archived state.

Release history

The package has existed since 2013 with 45 releases, but it has had no release in roughly two years. Its long history is positive maturity evidence, while the current release gap raises a maintenance concern.

Workflow audit

Both workflows were analyzed successfully with no reported audit findings or untrusted checkout and script-injection patterns. However, all seven action references are unpinned, which is a minor workflow hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Graham Campbell

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^9.0 \|\| ^10.0 \|\| ^11.0	—	—
illuminate/support Version ^9.0 \|\| ^10.0 \|\| ^11.0	—	—
illuminate/contracts Version ^9.0 \|\| ^10.0 \|\| ^11.0	—	—
graham-campbell/security Version ^11.2	—	—