jmcastle/herbert

Consumer documentation and security practices are thin. The package also has little evidence of adoption or community support, increasing the cost of relying on it for a maintained application.

Latest 0.9.17

Packagist

28%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package was first released about 8 years ago, but has had no releases in the last 12 months; all 17 releases were concentrated at its initial publication. This is strong evidence of abandonment for a library dependency.

Repo commit activity

The linked repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release hiatus and leaving no current maintenance capacity visible.

Package scaffolding

The published artifact has no README, tests, or changelog. Missing tests and changelog are normal for a published artifact, but the absent README is a real consumer-documentation gap for this framework library.

Repo popularity

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive, but these counts provide little supporting evidence of community use or review.

Repo tooling

Composer is used for the build, but the repository reports no security-scanning tooling. That is a modest hygiene gap, especially for an unmaintained dependency, though it is not severe on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ~1.16	—	—
illuminate/http Version ~5.0	—	—
symfony/var-dumper Version ~3.0	—	—
illuminate/database Version ~5.0	—	—
vierbergenlars/php-semver Version ~3.0	—	—