inteve/latte

The package has clear licensing, tests, a matching repository, and organization backing. Its small user base and lack of security scanning leave less independent assurance for a dependency that has not changed recently.

Latest v1.1.0

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

There have been only two releases since December 2023, with none in the last 12 months and a median interval of about 572 days. This indicates slow maintenance, though the latest release is recent enough that abandonment is not established.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived and was pushed with the release, but current maintenance activity is still absent.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of broad community use or outside review. Popularity is supporting evidence only, so this is a modest concern rather than a standalone dependency blocker.

Repo tooling

The project uses Make and Composer, but no security scanning tools were detected. Build tooling supports reproducibility, while the missing security checks reduce maintenance assurance.

Security policy

No repository security policy was found. This weakens vulnerability-reporting transparency, although it is not evidence that the package is unsafe.