jonnitto/smartlook

The small dependency surface and clear README keep adoption straightforward. Maintenance has slowed substantially, and the project lacks a security policy and automated security scanning. Its recent release notes and unarchived repository provide some ongoing-project evidence.

Latest 2.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 8 releases over nearly 10 years, but none in the last 12 months; the latest release was about 17 months ago. This indicates slow maintenance and raises abandonment concerns, though the project is not entirely inactive.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with no registry releases in the last year, this is meaningful evidence of currently limited maintenance.

Repo popularity

The repository has 2 stars, 1 fork, and 1 watcher, indicating a very small user and contributor footprint. Popularity is supporting evidence only, but this leaves limited visible community backing.

Repo tooling

The repository uses Composer, which matches the package ecosystem, but has no detected security-scanning tools. The missing scanning is a modest transparency and hygiene gap.

Security policy

The repository has no security policy. For a small Neos integration package this is not severe on its own, but it reduces clarity about vulnerability reporting.