kadet/keylighter

Clear documentation, tests, licensing, and minimal runtime dependencies reduce adoption friction. The source remains available and tied to the package, but workflow references need pinning.

Latest v0.9.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it indicates a limited formal backing structure.

Release history

The package has six releases since 2016, but none in the last 12 months and the latest release was over two years ago. This indicates materially reduced maintenance momentum.

Repo commit activity

There were no commits or active maintainers in the last three months. Combined with the old latest release, this raises abandonment risk.

Repo issue activity

There are no new issues or merged pull requests in the last month, while nine pull requests remain open. This suggests limited current project movement.

Security policy

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.