jakesharp/module-core

The package is small and easy to install, with a declared license and only one runtime dependency. Its source and registry records show no maintenance for more than 10 years, while documentation is limited and the repository does not clearly identify this package.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release was published in March 2016, and the package has had no releases in the last 12 months. A single release over more than 10 years ago is strong evidence of abandonment risk.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push being more than 10 years ago. No provided signal shows compensating recent maintenance.

Package scaffolding

The artifact includes a README, but it is only 8 characters long and there are no tests or changelog. Missing tests and changelog are normal for published artifacts, while the extremely limited README reduces consumer transparency.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package. This makes package ownership and publication provenance unclear, beyond the ordinary naming differences of a sub-package.

Repo tooling

The repository uses Composer, which is appropriate for this package, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.