hostnet/dead-tool

The MIT license, included tests, readable documentation, and reproducible Makefile/Composer build provide useful transparency. However, the release has seen no registry updates since April 2020 and no recent repository commits, while the linked repository does not identify this package; investigate ownership before adopting it.

Latest 1.3.2

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over six years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package receiving a new dependency decision today.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no visible current maintenance.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Although a subpackage can legitimately use a monorepo, this leaves the package-to-source relationship insufficiently clear.

Repo popularity

The repository has four stars and three forks, providing little community evidence to compensate for the lack of recent maintenance. Low popularity alone is not disqualifying for a small tool.

Security policy

The linked repository has no security policy. This is a transparency and incident-response gap, though the package's inactivity is the more significant concern.