lukaspijak/vcard-parser

The package is small and clearly identified, with an MIT license, README, and no install hooks. It lacks automated tests, security scanning, and a security policy, so future changes may be harder to verify.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, and the package is not presented as organization-backed. This is consistent ownership, but it indicates a limited apparent backing structure.

Release history

Only three releases have been published since November 2018, with no releases in the last 12 months and a median interval of about 3 years. The December 2024 release shows the project was updated recently enough to avoid an abandonment verdict, but the cadence is weak.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the long release interval, this is meaningful evidence of currently inactive maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of active use or review.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces assurance around ongoing maintenance without making the package unfit by itself.