khooz/commons

Its MIT license, matching repository, and GitHub release provide useful transparency. The package has had no new release or repository commits since 2014, with no security scanning and no meaningful adoption signals.

Latest 0.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 11 years ago, with no releases in the last 12 months. That is strong evidence of an unmaintained release line.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the package's long release gap and indicating substantial abandonment risk.

Project backing

The repository is owned by the same individual namespace as the package, so there is no ownership mismatch. Individual ownership provides less organizational continuity than an actively backed project, especially alongside the lack of recent activity.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but these counters provide no supporting evidence of a mature, actively used project.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. This is a hygiene gap that matters more for an old, inactive release.