mdxdave/craft-youtube

Its MIT license and single runtime dependency keep the package straightforward to inspect and integrate. Maintenance appears abandoned, with no release or commit activity since July 2019 and no tests or consumer README.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only one release, published in July 2019, and none in the subsequent years. This is strong evidence of abandonment for a dependency that may need compatibility updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases since July 2019. No compensating maintenance activity is shown.

Package scaffolding

Tests and a changelog are not expected in the published artifact, so their absence is normal. The missing README is a minor integration gap for a library, while the GitHub release confirms this version was published.

Repo tooling

The repository uses Composer, which is appropriate for this package, but no security scanning tools are present. This is a limited hygiene concern rather than a standalone adoption blocker.

Security policy

The repository has no security policy. That is a modest transparency and incident-response gap, though it is secondary to the much stronger abandonment evidence.