lichi/vk-sdk

The package has a clear MIT license, a usable README, and no install-time scripts. Its last release and repository commit were about five years ago, with no recent contributors, so maintenance risk is substantial.

Latest 1.0.3

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, and the latest was about five years ago with no releases in the past 12 months. This strongly raises abandonment risk despite the package being on a stable major version.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months, consistent with the release history showing roughly five years of inactivity. This is a significant maintenance concern.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide little supporting evidence of adoption or community oversight.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance weakness, especially for a package with otherwise limited recent activity.

Security policy

The repository has no security policy, leaving no documented process for reporting vulnerabilities. This is a secondary concern compared with the much stronger evidence of inactivity.