lepre/di

The package has had no release since March 2019 and no recent commit activity, while its only version remains an alpha. It has a clear MIT license, tests in the repository, and no install-time scripts, but the maintenance gap makes long-term reliance risky.

Latest 1.0.0-alpha1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published in March 2019, with no releases in the last 12 months. That long release gap materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed in September 2022, current development activity is absent.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though the package's small scope and other signals partly limit its impact.

Version stability

The latest and only release is 1.0.0-alpha1, so consumers are depending on explicitly unfinished software with no later stable release to demonstrate maturity.

Workflow audit

The workflow has read-only permissions and no detected high-confidence audit findings, but all three referenced actions are unpinned, leaving build inputs less reproducible than they could be.