kmgi/common-bundle

Tests, a changelog, an MIT license file, and no install-time scripts provide useful safeguards. The small dependency set helps limit exposure, but this release should not be adopted without a maintained alternative or a tightly controlled pin.

Latest v0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 5 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a package intended as a dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months, consistent with the repository having received no meaningful updates since 2021.

Package scaffolding

The package includes a README, tests, and a changelog, and the source repository also reports tests and a changelog. The README is short and marks substantial functionality and documentation as unfinished, which modestly limits consumer confidence.

Repo package mention

The repository name matches the package, reducing the risk of an unrelated source repository, but the README does not mention the package name. That mismatch is a minor provenance concern.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide little evidence of a broad user or contributor base.