many-hong/modern-php

The artifact is extremely minimal and offers no repository security policy or scanning, limiting transparency. Its stable 1.0 version and MIT declaration do not offset the long-standing abandonment and source-repository identity concern.

Latest 1.0

Packagist

18%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Release history

The package has had only one release, nearly ten years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's nearly ten-year period without a new release.

Package file tree

The published artifact contains only composer.json and one source file, providing little implementation or documentation context for consumers. Its small scope may explain the size, but transparency remains limited.

Repo package mention

The linked repository is named scanner rather than many-hong/modern-php, and no README mention was available. The mismatch raises concern that the repository may not actually document or maintain this package.

Repo tooling

Composer is used as a build tool, which is appropriate, but no security scanning tools are present. This is a modest hygiene gap rather than evidence of compromise.