luyadev/luya-core

The package is licensed, documented, and tied to an organization-owned repository. It has no security policy or scanning, so future maintenance and vulnerability response are less transparent.

Latest 2.3.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 61 releases since 2016, but none in the last 12 months and the latest release was over two years ago. Its long history helps, but the current release gap points to slowing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of recent releases, this is meaningful evidence of currently inactive maintenance.

Repo popularity

The repository has only 4 stars, 9 forks, and 2 watchers. Low popularity limits supporting evidence of broad scrutiny, though popularity alone does not determine whether a small package is healthy.

Repo tooling

Composer is used for builds, but no security scanning tool was detected. The build setup is present, while automated vulnerability oversight is missing.

Security policy

No repository security policy was found. This weakens transparency about vulnerability reporting and response expectations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Basil Suter

Direct Dependencies

Dependency	Last Release	Score
curl/curl Version ^2.0 \|\| ^1.0	—	—
yiisoft/yii2 Version ~2.0.15	—	—
luyadev/yii-helpers Version ^1.0	—	—
phpmailer/phpmailer Version ^6.0	—	—
luyadev/luya-composer Version ^1.0	—	—