inetstudio/polls

MIT licensing, a matching repository, and a stable major release provide a solid baseline. The long pause in maintenance and absent security policy make future fixes less certain; pin v10.0.1 if adopting it.

Latest v10.0.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog; missing tests and changelog are normal for published Packagist artifacts, but the missing README reduces consumer-facing transparency for a library package. A GitHub release exists for this version, partly compensating for the absent changelog.

Release history

The package has 75 releases since August 2017, but its latest release was in July 2024 and there were no releases in the following 12 months. This is a meaningful maintenance concern despite the historically regular release cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the broader release pause. This raises abandonment and future-fix risk.

Repo tooling

The repository uses Composer for its build, but no security-scanning tooling was detected. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. That makes vulnerability reporting and response expectations less transparent, especially when recent maintenance activity is absent.