jokkedk/zfdebug

The README and release notes make integration straightforward, and the repository clearly matches the package. Maintenance has effectively stopped, with no recent commits or issue movement; pin this version rather than expecting fixes.

Latest 1.7.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only 5 releases since June 2014, with no releases in the last 12 months and the latest release in October 2019. This is a substantial maintenance concern for a dependency.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no current development activity. The repository is not archived, but that does not compensate for the inactive commit history.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 7 issues and 6 pull requests remain open. This supports the conclusion that maintenance is currently inactive.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That limits evidence of ongoing security hygiene, while the small package and otherwise clear source structure provide some compensation.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though not severe enough to make the release unfit on its own.