marwelln/basset

The package includes tests, a README, and a matching MIT license, with no install-time scripts. Its repository lacks a security policy and scanning, while the available project evidence offers little support for continued maintenance.

Latest 7.1

Packagist

22%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement named. This is a severe warning for developers considering a new dependency.

Release history

The last release was published on March 7, 2020, and there have been no releases in the last six years. That strongly indicates abandonment despite the package having 19 historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This provides no evidence of current maintenance capacity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. This is a maintenance and assurance gap, though it does not by itself establish that the package is unsafe.

Security policy

The linked repository has no security policy. For a package that processes application assets, this reduces transparency around reporting and handling vulnerabilities.