irap/autoloader

The README, minimal runtime dependency set, and organization-backed repository make the package straightforward to adopt. Its small source tree and lack of security scanning leave less evidence of ongoing engineering discipline.

Latest 2.0.1

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 11 years but has only 5 releases, with no releases in the last 12 months; the latest release was about 20 months ago. Release notes for version 2.0.1 provide some transparency, but the long gaps suggest limited ongoing maintenance.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months. For a small stable library this may reflect infrequent changes, but together with the release history it reduces evidence of active maintenance.

Repo popularity

The repository has 0 stars and 1 fork. This is weak supporting evidence rather than a health verdict, but it provides little external evidence of community adoption.

Repo tooling

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of unsafe behavior.

Security policy

The repository has no security policy. This limits the documented process for reporting vulnerabilities, though the package's small scope reduces the significance of that gap.