marsoltys/qasapi

The package has an MIT license, tests, a stable version, and no install-time scripts. Its tiny user base, absent security tooling, and long-standing lack of maintenance make future fixes and support unlikely.

Latest 1.0.0.5

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in November 2015, with no releases in the last 12 months despite the package being over 11 years old. This is strong evidence of abandonment for a dependency that may need compatibility or security fixes.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository's last push in November 2015. This materially increases abandonment risk.

Project backing

The package and repository are owned by an individual rather than an organization, so the single registry maintainer does not have broader project backing to compensate for the inactive repository.

Repo popularity

The repository has zero stars and forks and only two watchers, so there is little visible community activity or backup support if the package stops working.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. For an old package, the lack of automated security checks is a meaningful maintenance gap.