jakubigla/psr7-auth

The package includes a clear MIT license, tests, and no install-time scripts. Its small dependency set and matching repository help, but this is not enough for a project with no recent maintenance.

Latest 0.0.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the package's roughly 10-year release gap. This materially raises abandonment risk.

Repo popularity

The repository has zero stars and zero forks, with only two watchers. Popularity is supporting evidence rather than a verdict, but these very low adoption signals provide no meaningful community cushion.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, while the long inactivity remains the more important concern.

Security policy

The repository has no security policy. For an authentication-focused library, this reduces transparency about vulnerability reporting and maintenance response.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jakub Igla

Direct Dependencies

Dependency	Last Release	Score
beberlei/assert Version ^2.4	—	—
psr/http-message Version ^1.0	—	—
sandrokeil/interop-config Version ^1.0	—	—
container-interop/container-interop Version ^1.1	—	—