klebervmv/easycurl

This is a usable, clearly identified Composer package with an MIT license, a matching source repository, stable versioning, no deprecation, minimal runtime dependencies, and a recent release. However, its maintenance and transparency profile is modest: the repository has only one star, no commits or active maintainers in the last 3 months, no tests or changelog, no security policy, and no security-scanning tooling. The package is not archived and has been pushed recently, but the limited contributor and validation evidence warrants caution before adopting it as a critical dependency.

Latest 1.0.14

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package file tree

The package tree is very small, containing a README, Composer metadata, and a single source file; this is plausible for a lightweight HTTP wrapper but provides little implementation or test transparency.

Package scaffolding

A README is present, but the artifact and repository contain no tests or changelog, leaving limited evidence for regression validation and release transparency.

Project backing

The repository is owned by an individual user rather than an organization, so the single registry maintainer corresponds to a genuinely thin project backing rather than normal organization publishing hygiene.

Release history

The package is about 5 years old with 15 releases and a release within the last year, but only one release occurred in the last 12 months, indicating limited recent release activity.

Repo commit activity

There were 0 commits and 0 active maintainers during the last 3 months, which is a meaningful maintenance concern despite the recent package release and repository push evidence.