henderjon/drop

The artifact is small and clear, with tests, a README, a matching repository, and a permissive license. It has one runtime dependency and no install-time scripts, which keeps adoption straightforward.

Latest v1.3.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, so the ownership relationship is clear, but there is no organizational backing to offset the thin maintainer base.

Release history

The package has eight releases, but its latest release was nearly 11 years ago and it has had no releases in the last 12 months. This is a meaningful maintenance and abandonment concern.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with a repository that has been inactive since 2017. This materially raises abandonment risk.

Repo tooling

Composer is used as the build tool, but no security scanning tool is present. For this small debugging helper the missing scanner is a minor hygiene gap, not a severe dependency risk.

Security policy

The repository has no security policy. This reduces transparency for reporting vulnerabilities, though the package's small scope limits the practical impact.