light/traits

The package is lightweight, licensed, and backed by repository tests and release notes. Its last release and repository update were about 10 years ago, with no recent commit activity and no security policy. The small dependency surface limits exposure but does not offset the abandonment risk.

Latest 0.0.2

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both in 2016, and no releases in the last 12 months; the latest release was about 10 years ago. This is strong evidence of abandonment risk, although the package is small and may be stable.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the last repository update being about 10 years ago, this materially increases abandonment risk.

Project backing

The package and repository are associated with an individual user rather than an organization-backed project. That is consistent with a small package but offers limited visible maintenance capacity.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of an active user or contributor community.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a hygiene gap, while the declared build tooling provides basic project structure.