gstjohn/fastimage

The package has a clear MIT license, a matching repository, and only one runtime dependency. Its compact source tree and documented usage help, but the repository has no security policy and no automated security scanning.

Latest v1.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a single-release package, and its only release was published in March 2015; more than 11 years without another release is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide no community buffer for an unmaintained package.

Repo tooling

Composer is used as the build tool, which is appropriate, but no security scanning tools are configured. That weakens ongoing visibility into dependency or code issues.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency and maintenance gap, though not severe on its own.