kaystrobach/password

The MIT license, README, and matching repository reference make the package straightforward to inspect and integrate. Its very small audience, absent security policy, and lack of security scanning provide little visible support for long-term maintenance.

Latest 2.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in the last 12 months, and its latest release was in September 2022 despite being over nine years old. This is strong evidence that maintenance has stopped.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months; its last push was in September 2023. That leaves current maintenance capacity un demonstrated.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, indicating very limited adoption or community support. Popularity is supporting evidence rather than decisive on its own, so this lowers confidence in ongoing maintenance modestly.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. This weakens supply-chain transparency and maintenance hygiene, although it is not evidence that the release is unsafe.

Security policy

The repository has no security policy, so there is no visible process for reporting or handling vulnerabilities. That is a transparency gap for a package involved in password validation.