mhndev/pongo

The README and matching repository make the package’s purpose and ownership clear. Its small footprint, lack of security tooling, and limited adoption add little evidence of ongoing support.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published in January 2019, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in January 2019. This confirms that the release inactivity reflects a dormant project rather than registry-only delay.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is not decisive, but these very low adoption indicators provide little supporting evidence of maturity or active community support.

Repo tooling

Composer is used for builds, which fits the package, but no security scanning tools are configured. This is a hygiene gap for a package that handles database access, though it is not severe on its own.

Security policy

The repository has no security policy. That reduces vulnerability-reporting transparency, although the small and apparently dormant project makes this a secondary concern compared with its lack of maintenance.