Package Health/innocenzi/deployer-recipe-forge

innocenzi/deployer-recipe-forge

Usable with caveats: the package is clearly identified, documented, licensed, and not deprecated or archived. However, it has had no commits or releases for more than two years, and the repository lacks a security policy, so verify compatibility before adopting it.

Latest 0.3.4

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository having been inactive for more than two years. This is the main abandonment concern.

Project backing

The registry namespace and repository owner match, so the package has direct user-account backing rather than an unexplained repository association. A single-owner project still has limited continuity capacity.

Release history

The package has 16 releases since September 2023, but none in the last 12 months and its latest release was over two years ago. That long publishing gap raises maintenance risk.

Repo popularity

The repository has 19 stars and 1 fork, providing modest evidence of use but not enough to offset the prolonged lack of maintenance.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected. The missing scanning is a transparency gap, though it is partly offset by the simple repository structure and lack of risky workflow patterns.