jsalam/ugrpm

The project includes tests, substantial documentation, and a clear MIT license. Its very small community and lack of security controls leave less evidence of ongoing support.

Latest v1.0.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about three years ago, with no releases in the last 12 months. That is meaningful evidence of limited maintenance, although the project may be stable.

Repo commit activity

There were no commits or active maintainers in the last three months, consistent with a project whose latest release was about three years ago. This raises the risk that fixes may not arrive promptly.

Repo popularity

The repository has one star and no forks, showing very limited external adoption or review. Popularity is supporting evidence rather than a verdict, but this leaves a thin community safety net.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a hygiene gap rather than evidence of unfitness.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations. This is a moderate governance gap, not a severe risk by itself.