lfbellante/vies

Clear documentation, tests, licensing, and a simple install profile make the package straightforward to evaluate. The missing security policy leaves vulnerability reporting and response practices unclear.

Latest v1.2.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no updates since December 2021. This materially increases abandonment risk.

Project backing

The package and repository are owned by the same individual account, providing clear ownership context. Individual ownership does not provide the continuity of an organization-backed project.

Release history

The package has had no releases in the last four years and ten months, despite only five releases overall. This is strong evidence that maintenance has stopped, although the release history was initially active over a short period.

Repo tooling

Composer build tooling is present, but no security scanning tools are reported. That is a modest maintenance-hygiene gap rather than evidence that the release is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented route for reporting vulnerabilities or understanding how security issues are handled. The otherwise clear package documentation does not compensate for this specific gap.