k2gl/token-status-list

This is a technically well-scaffolded, licensed, non-deprecated package with a matching repository, repository tests and changelog, security policy, dependency scanning, and no install-time lifecycle scripts. However, version 1.0.0 was released today, has no established release history, zero commits or active maintainers in the measured three-month window, no repository popularity, and only one registry maintainer. The repository is not archived and shows a recent push plus one merged pull request, so this looks like a legitimate early-stage package rather than an abandoned one, but its maintenance maturity and long-term support remain unproven; depend on it with normal caution and monitor subsequent releases and activity.

Latest 1.0.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Nick Harin

Direct Dependencies

Dependency	Last Release	Score
k2gl/dsse Version ^1.3	—	—
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.0	—	—
psr/http-message Version ^1.1|^2.0	—	—
psr/simple-cache Version ^1.0|^2.0|^3.0	—	—