Package Health/ifcanduela/kernel-middleware

ifcanduela/kernel-middleware

Risky to adopt: this package has had no release or repository activity since November 2022. It is clearly licensed, documented, and tested, but its one-release history and long inactivity suggest abandonment risk.

Latest 1.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 3 years and 10 months ago, with no releases in the last 12 months. This provides little evidence of ongoing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package having been inactive since November 2022. That materially raises abandonment risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little external evidence of active use or review.

Repo tooling

Composer is used for the build, but no security scanning tool is configured. This is a transparency gap, although the lack of tooling is less significant than the package's prolonged inactivity.

Security policy

The repository has no security policy. For a small middleware library this is a modest transparency gap, not a standalone reason to reject the package.