grimkirill/stomp

It has a readable README, tests, an MIT license, and only one runtime dependency. The small repository has no security scanning, so future fixes and vulnerability response may be limited.

Latest 1.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, with none in the last 12 months; its latest release was about 11 years ago. This is strong evidence of abandonment, though the package is not marked deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. No provided signal shows current maintenance capacity.

Repo popularity

The repository has 3 stars and no forks or watchers, offering little supporting evidence of broad review or community maintenance. Low popularity is not decisive for a small stable library, but it does not offset the inactivity.

Repo tooling

Composer is used for builds, which is appropriate, but no security scanning tools were detected. The missing scanning is a modest transparency and response gap.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This compounds the concern created by the lack of recent maintenance.