kody/common

The repository is unarchived, and the package includes an MIT license and a README. Its single registry publisher and absent security policy leave limited resilience if maintenance or security issues arise.

Latest 1.10

Packagist

44%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over two years: its latest release was February 20, 2024, despite being about 945 days old at collection. This is strong evidence of abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in over two years. This materially increases abandonment risk.

Lifecycle scripts

The package defines a post-install command, adding installation-time behavior that consumers should understand. The signal provides no evidence that the command is harmful, so this is a limited transparency concern.

Project backing

The registry namespace is kody, while the linked repository is owned by an individual user rather than an organization. This offers little visible organizational backing for a package already showing stale activity.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. Build tooling is present, while the missing security automation is a modest maintenance gap.