iggyvolz/pnp

The source is clearly tied to the package, is licensed, and has a small dependency footprint. There is no security policy, repository testing, or automated workflow evidence, limiting confidence in future maintenance and response capacity.

Latest v0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only one release, published about four years and nine months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old last push and single release, this materially raises abandonment risk.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of adoption or community support.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap rather than a standalone reason to reject the package.

Repository archived

The repository is not archived, which is a positive counter-signal, but it was last pushed about four years and eight months ago. The repository remains available without showing current maintenance.