maxicms/phpthumb

The stable major version, small dependency footprint, tests, and clear README support adoption. However, the project has had no commits or releases for about 10 years, with very little repository activity and no security policy.

Latest 2.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 10 years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, despite the package not being deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no observed recent maintenance to compensate.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of an active user or maintainer community. Low popularity alone is not decisive, but it reinforces the maintenance concern here.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap that matters more for an image-processing library exposed to potentially untrusted files.