holyshared/attribute

Its MIT license and single runtime dependency keep review and integration simple. The absence of recent maintenance or security tooling makes long-term fixes and support uncertain.

Latest 0.1.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both in October 2015, and none in the past 11 years. That long release gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no activity since 2015.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of a broader active user or contributor base. Popularity is only supporting evidence, so this reinforces rather than determines the low score.

Repo tooling

Composer is used for builds, but no security scanning tools are present. This weakens ongoing maintenance assurance, especially for a project with no recent activity.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less significant than the prolonged inactivity.