mdantas/csv-map

It has a clear README, tests, and a small dependency surface. Security scanning and a security policy are absent, leaving weak evidence of ongoing vulnerability response.

Latest v2.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, following the last push in July 2020. This materially raises abandonment risk for a dependency.

Project backing

The repository is owned by an individual account rather than an organization, and the registry maintainer list contains one person. That is consistent with a small personal project but offers limited visible continuity if the maintainer stops working on it.

Release history

The package has only three releases, all clustered on 21 July 2020, and none in the last 12 months despite being over six years old. This is strong evidence of limited ongoing maintenance.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of a wider user or contributor base. Popularity is not required for health, but this removes a possible source of resilience.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The missing scanning is a maintenance and vulnerability-response gap, though it is not severe on its own.