ikechukwuokalia/php-ico

The package is clearly documented, licensed, and has a very small dependency surface. Its single-release history and nearly two years without recent repository activity make long-term maintenance uncertain; pin this version and test it with your PHP targets.

Latest 0.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only one release exists, with no releases in the last 12 months, despite the package being nearly two years old. This is meaningful evidence of limited ongoing maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. For a small library this may reflect completion, but it leaves current maintenance capacity unproven.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. The missing scanner is a hygiene limitation rather than evidence that the release is unsafe.

Repository archived

The repository is not archived, so it remains available for maintenance; however, its last push was nearly two years ago, which reinforces the maintenance concern.

Security policy

The repository has no security policy, which reduces transparency about vulnerability reporting and handling. This is a modest concern for a small, low-dependency library.