level-2/transphporm

Usable with caveats: the package is well documented, tested, licensed, and backed by a matching organization repository. However, the latest registry release was about six years ago and the repository shows no recent commit or issue activity, so ongoing maintenance is uncertain.

Latest v1.5.1

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with the old package release, this is meaningful evidence of currently inactive maintenance.

Release history

The package has 12 releases since December 2015, but none in the last six years, indicating that registry delivery has effectively stopped. The repository was pushed more recently, which provides some context but does not offset the stale published release.

Repo issue activity

There are 26 open issues and four open pull requests, but no new or closed issues and no merged pull requests in the last month. This suggests limited current project interaction and raises maintenance uncertainty.

Repo tooling

Composer is used as a build tool, which fits the PHP package and supports reproducible project handling. No security scanning tools are present, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less severe than an archived or actively compromised project.