joshdifabio/fbind

The package is compact, tested, and has a permissive MIT declaration. Its maintenance and security coverage are limited, so pinning this release carries meaningful abandonment risk.

Latest v1.0.0

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published in May 2016, with no releases in the last 12 months; the nearly ten-year gap is strong abandonment evidence.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the long period without a release and increasing abandonment risk.

Project backing

The package and repository are owned by the same individual account, providing clear ownership, but there is no organization backing shown to compensate for the single-person project.

Repo popularity

The repository has zero stars and watchers and one fork. Popularity is only supporting evidence, but these figures provide little evidence of a maintained user base.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than proof of unsafe code.