jitamin/picofeed

The MIT license and small dependency surface make the package straightforward to adopt. Its minimal documentation, absent tests, and missing security policy leave too little support for a long-lived dependency.

Latest v0.1.25

Packagist

30%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in August 2018, and there have been no releases in the past eight years. That is strong evidence of abandonment for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving current maintenance unproven.

Package scaffolding

The package includes a README, but it is only 11 characters long and neither the package nor repository has tests or a changelog. The GitHub release for this version provides some release transparency, but not enough to offset the missing validation and documentation.

Repo popularity

The repository has zero stars and forks and only three watchers. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful community backing to compensate for inactivity.

Repo tooling

Composer is used for the build, which is appropriate for this package, but no security scanning tools are configured. That is a hygiene gap rather than evidence that the release is unsafe.