lumphp/codec

The project has clear MIT licensing and a small, understandable source tree. Its README is effectively empty and the repository has no security policy, leaving consumers with little guidance or disclosure.

Latest v0.2

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the sole release, published about 4 years and 9 months ago, with no releases in the past 12 months. That strongly raises abandonment risk, though the package is not marked deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with no activity since December 2021. That leaves little evidence of ongoing maintenance.

Package scaffolding

The package includes a GitHub release note for this version, which documents the release. Its one-character README provides effectively no consumer guidance; the absence of tests and a changelog in the published artifact is normal packaging practice.

Repo tooling

Composer is used as the build tool, but no security-scanning tool is configured. The missing scanning is a hygiene gap, not evidence that the package is unsafe by itself.

Security policy

The linked repository has no security policy, so users have no stated process for reporting vulnerabilities. This reduces transparency for a package handling cryptographic and token-related functionality.