joedevsharp/entitylite

The small, user-backed project has little adoption evidence and no published security policy. It is licensed and has a README, but the maintenance gap makes long-term support uncertain.

Latest 0.2.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was nearly two years ago, with no releases in the last 12 months. This is strong evidence of inactive maintenance for a young library.

Project backing

The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing to offset the thin maintenance and adoption evidence.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This does not prove abandonment, but it provides no evidence of an active community.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community support.

Repo tooling

Composer is used for builds, but no security-scanning tools are configured. The missing scanning is a hygiene gap, not a severe dependency risk on its own.