johndwells/dotall-2022

The repository matches the package, includes a clear setup README, and has a stable 0BSD license. Its install-time script and lack of security tooling add modest caution.

Latest 1.2

Packagist

65%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-root-package-install script during installation. This adds some supply-chain and reproducibility caution, though the signal does not show that the script is harmful.

Release history

The package has had no releases in roughly four years, with all three releases clustered on one day in September 2022. This strongly limits evidence of ongoing maintenance, although the package is explicitly a conference demo.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since its 2022 release. Its demo-oriented purpose partly explains the inactivity but does not remove the abandonment risk.

Repo tooling

The project uses Make and Composer for builds, which supports repeatable setup, but it reports no security scanning tools. That is a modest transparency and maintenance gap for a package with an install workflow.

Security policy

The repository has no security policy. For a small conference demonstration this is a limited concern, but it leaves no documented channel or process for reporting security issues.