joacub/zf2-sphinxsearch

Its BSD-2-Clause declaration conflicts with the BSD-3-Clause license file, creating a licensing clarification issue. The small project also lacks tests, security scanning, and a security policy, limiting maintenance transparency.

Latest 0.7.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in April 2015, with no releases in the past 12 months and only six releases overall. This is strong evidence of abandonment for a dependency, despite the package not being formally deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's long period without releases. No provided signal shows compensating maintenance activity.

License

The manifest declares BSD-2-Clause, while the artifact license file is recognised as BSD-3-Clause; although a license is present, the mismatch should be resolved before adoption.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of an active user or contributor community.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. That leaves little evidence of ongoing dependency or release hygiene.