linkorb/extractor

The package is clearly identified, MIT-licensed, and documented with a consumer-facing README. Its small dependency set and lack of install-time scripts reduce installation risk, though the absence of tests and security tooling limits confidence.

Latest v1.1.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in October 2018, nearly eight years ago, with no releases in the past 12 months. This strongly raises abandonment risk despite the package not being deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and providing no evidence of ongoing maintenance.

Repo popularity

The repository has zero stars and forks and only two watchers, offering little supporting evidence of broad adoption or community resilience. Popularity is secondary, but this adds to the limited maturity evidence.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. That is a modest transparency and hygiene gap, not a substitute for the stronger maintenance concern.

Security policy

The repository has no security policy, leaving vulnerability reporting guidance unspecified. This is a minor transparency gap for a package with otherwise clear ownership.