joshavg/sonar-runner

The package is clearly licensed, has a matching repository, and adds no install-time scripts. Its small binary-focused layout is understandable, but the project offers little operational or security transparency.

Latest 2.7.2

Packagist

34%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly 10 years; its five releases were concentrated on 14 September 2016, leaving current maintenance un demonstrated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and strong abandonment risk.

Repo issue activity

There was no issue or pull-request activity in the last month and no merged pull requests, providing no evidence of ongoing project maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher, so there is little community evidence to compensate for the inactive maintenance record.

Repo tooling

Composer is used for project builds, but no security-scanning tooling is present; this is a modest transparency and assurance gap.