mecha-cms/x.panel.tag

The organization-owned repository matches the package, carries a license, and has no install-time scripts. It has no security policy or automated security scanning, so transparency is limited.

Latest v1.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about three years ago, with no releases in the last 12 months. This limits evidence of sustained maintenance.

Repo commit activity

The repository shows zero commits and zero active maintainers in the last three months. The repository is not archived and was pushed more recently, but current development activity is still unclear.

Repo popularity

The repository has no stars or forks and one watcher. This indicates limited public adoption, but popularity is only supporting evidence and does not outweigh the available organization backing and matching source repository.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a modest hygiene concern rather than evidence of abandonment.

Security policy

The linked repository has no security policy. This is a transparency gap for reporting and handling security issues.