level-level/clarkson-404

Usable with caveats: the package is stable, licensed, backed by an organization, and has a matching source repository with release notes. However, it has had no release or repository commits for about two years, and the repository lacks a security policy and README reference to the package.

Latest 1.0.6

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 11 releases since February 2017, but its latest release was about 2 years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern for a dependency, though not evidence of abandonment by itself.

Repo commit activity

There were no commits and no active maintainers in the last 3 months; combined with the roughly 2-year release gap, this points to a presently inactive project.

Repo issue activity

There is one open issue and no issue or pull-request activity in the last month, offering no recent evidence of active support.

Repo package mention

The repository name matches the package, so it does not appear to be piggy-backing on an unrelated project. However, the README does not mention the package, which is a modest transparency gap.

Repo tooling

Composer build tooling is present, but no security scanning tooling is configured. For this small package that is a hygiene gap rather than a severe risk.