m1/vars

The package is licensed, documented, and backed by a matching source repository with tests and release notes. Its small, inactive project remains usable, but maintenance capacity appears limited and security tooling is absent.

Latest 1.1.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release in over 10 years, despite 12 releases during its initial development. This is substantial evidence of stagnation for a library dependency.

Project backing

The registry namespace and repository owner match, but the owner is an individual rather than an organization. This supports package identity while offering limited backing capacity.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and raising abandonment risk.

Repo issue activity

There are 6 open issues and 3 open pull requests, but no issues or pull requests were opened or closed in the last month. This reinforces the picture of limited ongoing activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were found. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.