io-developer/php-keyget

Its narrow scope, README, MIT license, and tests make the package easy to inspect and adopt. However, it has had no release or commit activity since June 2018 and lacks a security policy; pin it only if this stable utility still meets your PHP needs.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in June 2018, with no releases in the last 12 months. This is a meaningful maintenance concern despite the package reaching a stable 1.0.1 version.

Repo commit activity

There were no commits and no active maintainers in the preceding three months. Combined with the old last push, this indicates inactive maintenance and raises abandonment risk.

Repo popularity

The repository has one star and no forks, providing little evidence of broad community review or shared maintenance. Popularity is supporting evidence only, so this is a modest concern rather than a primary risk.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. That is a hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations. This matters more because maintenance activity is also absent.