keeko/core

The MIT declaration, readable README, and GitHub release notes improve transparency. Its small repository footprint is less important than the lack of activity since 2016, so pinning this version leaves you with an aging dependency.

Latest v0.2.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly 10 years: its latest release was July 2016, with zero releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, with the repository last pushed in 2016. This indicates that maintenance capacity has effectively disappeared.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad active user base.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. That is a hygiene gap, not evidence that the package is unsafe.

Repository archived

The linked repository is not archived, so it remains administratively available. However, its last push was in July 2016, which is consistent with the maintenance concern shown by the release history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thomas Gossmann

Direct Dependencies

Dependency	Last Release	Score
puli/discovery Version @beta	—	—
puli/repository Version ^1.0@beta	—	—
puli/url-generator Version @beta	—	—
puli/twig-extension Version @beta	—	—
puli/composer-plugin Version @beta	—	—