Package Health/joyousphper/composer-demo

joyousphper/composer-demo

The MIT license, matching repository, and simple dependency profile make the contents easy to inspect. Its tiny README and lack of security policy reduce transparency, while the old release line leaves maintenance uncertain.

Latest v0.1.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both in July 2017, with no releases in the last nine years. This is strong evidence of abandonment risk despite the repository remaining available.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This supports the release-history evidence that active maintenance is absent.

Package scaffolding

The artifact includes a README, but it is only 30 characters long and provides little consumer guidance. The absence of tests and a changelog is normal for published artifacts and is not treated as a gap here.

Security policy

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. For this very small package, this is a secondary concern rather than a standalone severe risk.

Version stability

Version v0.1.1 is not a stable major release, so compatibility expectations are limited. The long period without a newer release reinforces the maintenance concern.