ivan547-arnus/mx-curp

The package has a clear README, repository tests, an MIT license, and only one runtime dependency. Its small project footprint and limited security tooling leave less evidence of long-term maintenance than established alternatives.

Latest 0.1.0

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so the single registry maintainer does not have visible organizational backing to compensate for the thin maintenance evidence.

Release history

This is the only release, published about 1 year ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance, although the package is still relatively young.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This may reflect a small, stable project, but it provides no recent evidence that issues or compatibility changes are being handled.

Repo tooling

Composer is used for the build, but no security-scanning tool was detected. For a small library this is a hygiene gap rather than a severe dependency risk.

Security policy

The repository has no security policy. This weakens the documented path for reporting vulnerabilities, though it does not by itself show that the package is unsafe.