melsaka/mediafile

The package includes a clear README, release notes for this version, an MIT license, and no install-time scripts. Its small user-owned project has no tests or security policy, and activity has stopped since October 2024, so future fixes are uncertain.

Latest v0.3.1

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had four releases since October 2023, but none in the last 12 months and the latest release was in October 2024. This is meaningful evidence of slowing or stopped maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. That weakens confidence that compatibility or security issues will be addressed promptly.

Repo popularity

The repository has one star, zero forks, and one watcher. Popularity is only supporting evidence, but these figures provide little external evidence of review, adoption, or community support.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence that the release is unsafe.

Security policy

The linked repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency and maintenance concern for a package that handles uploaded files.