ingruz/yodo

Risky to adopt: the package has had no release since December 2020 and no recent repository commits. It has solid documentation, tests, licensing, and a matching source repository, but the prolonged inactivity makes abandonment a significant concern.

Latest v1.1.0

Packagist

46%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2020, nearly six years before collection, with no releases in the last 12 months. This long gap is a substantial maintenance and abandonment concern despite the package having 13 releases overall.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating no recent maintenance activity.

Repo popularity

The repository has zero stars and forks and only one watcher. Low visibility is not decisive for a small package, but it provides little supporting evidence of an active user or contributor community alongside the stale maintenance record.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is present. This is a minor transparency and maintenance gap, though it is less significant than the package's prolonged inactivity.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency gap for a library intended for web applications.