kdyby/annotations

It has a clear license, a stable version, repository tests, and no install-time scripts. However, its maintenance signals are dated, and the repository has no security policy, leaving future compatibility and security response uncertain.

Latest v3.0.1

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about seven years ago, with no releases in the preceding 12 months. That strongly raises abandonment and compatibility risk, despite a history of 22 releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months, and its last push was about six years ago. This indicates very limited ongoing maintenance.

Repo issue activity

There were no new or closed issues in the past month and one open pull request. This is consistent with a largely inactive project, though the lack of open issues limits evidence of unresolved problems.

Repo tooling

Composer build tooling is present, showing a defined package workflow, but no security-scanning tooling was detected. This is a modest hygiene gap rather than evidence that the release is unsafe.

Security policy

The linked repository has no security policy. For a maintained dependency this weakens disclosure and response transparency, although the project’s broader inactivity is the more significant concern.