lasserafn/cvrapi

Risky to adopt: the package has had no release or repository activity since November 2022, leaving maintenance and compatibility uncertain. It is licensed, stable, and transparently linked to a matching repository, but its tiny project footprint and lack of tests or security policy add to the concern.

Latest 2.0

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases and historically released about every 57 days, but its latest release was over three years ago and it has had no releases in the last 12 months. This strongly raises abandonment and compatibility risk.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the release gap. The repository is not archived, but there is no observed recent maintenance to compensate.

Repo popularity

The repository has only 3 stars and 2 forks, providing little evidence of a broad user or contributor base that could help sustain the package.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. This is a transparency and maintenance weakness, though not by itself evidence that the package is unsafe.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap alongside the stronger maintenance concerns.