mecha-cms/x.part

The package is clearly licensed, has a matching source repository, and keeps its runtime dependency surface small. Organization backing helps, but the lack of security policy and scanning leaves limited assurance for future maintenance.

Latest v3.0.1

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with no release in nearly three years; this is a substantial maintenance and abandonment concern for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence of a dormant project.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a very small project but does not demonstrate active maintenance.

Repo popularity

The repository has no stars or forks and only one watcher. Low popularity is supporting evidence rather than a verdict, but it offers little external adoption evidence.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are configured. The missing scanning is a modest transparency gap for ongoing maintenance.