gravitatenz/fta-cache

The package has a clear README, tests, an explicit BSD-3-Clause license, and a focused dependency set. Its workflow audit found no high-risk issues, but one action is unpinned and no security policy or scanning is present.

Latest v0.0.3

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, and the latest was about five years ago, with no releases in the past 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months, consistent with the release history showing the project has been inactive for about five years.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than decisive, but these figures provide little evidence of active community oversight.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.

Repository archived

The linked repository is not archived, although its last push was about five years ago; the non-archived status does not offset the lack of recent activity by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

John Lennard

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version >=3.0	—	—
symfony/http-kernel Version >=4.4	—	—
symfony/http-foundation Version >=4.4	—	—
symfony/event-dispatcher Version >=4.4	—	—