hkvstore/didom

Clear documentation, repository tests, licensing, and a small dependency surface support adoption. However, the package has had no commits or releases for about 18 months, and its single-maintainer project has no security policy or automated security scanning.

Latest v2.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release is the package's only recorded release, published about 18 months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. This is the strongest evidence that current maintenance capacity is weak.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Repository archived

The linked repository is not archived, but its last push was about 18 months ago, consistent with the lack of recent releases and suggesting stalled maintenance rather than archival.

Security policy

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a library consumers may integrate directly.