limp/data

The package is small and its repository clearly matches the published artifact. Its decade-long inactivity, lack of tests, and absent security process leave maintenance and abandonment risk high.

Latest 0.0.4

Packagist

32%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was about ten years ago, with no releases in the past 12 months; only four releases exist overall. This is strong evidence of abandonment risk despite the short early release intervals.

Repo commit activity

The repository has had no commits or active maintainers in the past three months, consistent with the release history showing no release for about ten years.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but it provides no compensating sign of active community support.

Repo tooling

Composer is used as a build tool, which is positive, but no security scanning tools are configured. That leaves a modest supply-chain hygiene gap.

Security policy

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency gap, though it is secondary to the much older maintenance evidence.