Package Health/hypejunction/elgg-snippets

hypejunction/elgg-snippets

Usable with caveats: the package is documented, licensed, stable, and not deprecated or archived. However, its last release and repository update were in July 2019, with no commits or active maintainers in the last three months, so expect little ongoing support.

Latest 1.0.1

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, and the latest was published in July 2019; there have been no releases for about 7 years. This is a substantial maintenance and compatibility concern for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the package's long period without a release. No stronger maintenance activity is provided to offset this.

Project backing

The package is backed by a personal-user repository rather than an organization, so the single registry maintainer provides limited continuity if that maintainer becomes unavailable. This concern is secondary to the directly observed inactivity.

Repo popularity

The repository has only 1 star and 1 fork, indicating limited adoption and external visibility. Popularity is supporting evidence rather than a verdict, but it provides little independent assurance for an otherwise inactive project.

Repo tooling

Composer is used for builds, but no security scanning tooling is configured. The missing scanning is a hygiene weakness, though the absence of complex automation limits the practical impact.