jlle/env-info

The MIT license, README, small dependency set, and absence of install scripts make the package straightforward to inspect and install. Its single-maintainer project has had no commits or releases for nearly four years, and it lacks security scanning and a security policy.

Latest 0.1.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry publishing account is recorded. This is a limited publishing base, and the linked repository is owned by an individual rather than an organization, so there is little visible redundancy if the maintainer stops work.

Project backing

The registry namespace and repository are tied to an individual user, with no organization backing shown. That provides limited continuity evidence when combined with the inactivity signals.

Release history

Only two releases were published, both in 2022, with no releases in the last four years. This is strong evidence of abandonment risk for a package that may need ongoing compatibility maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository having stopped after 2022. This materially raises abandonment risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no external adoption or community-maintenance cushion.