kehikko/composer

The package is small and clearly scoped, with a matching repository, MIT license, and no install-time scripts. Its only release was in June 2017, with no releases in the last 12 months and no commits or active maintainers in the last three months; adoption carries substantial abandonment risk.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published in June 2017, with no releases in the last 12 months. That long release gap is a substantial maintenance and abandonment concern.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the 2017 release history, this strongly reinforces abandonment risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month. With zero recent commits, this indicates little visible project activity rather than an actively maintained codebase.

Repo tooling

Composer is used as the build tool, showing basic project tooling, but no security scanning tools are configured. The missing scanning is a hygiene gap, not the main reason for the low score.

Security policy

The repository has no security policy. For this small package this is a modest transparency gap, though it is outweighed by the much older maintenance signals.