mojahed/converts

The focused dependency set and clear README make integration straightforward. Its single release and absence of recent commits or security scanning leave limited evidence of sustained maintenance.

Latest 1.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so the single registry maintainer does not have organizational backing to offset the thin maintenance evidence.

Release history

This package has only one release, published 121 days ago, so there is little release history to demonstrate sustained maintenance. Its young age partly explains the limited history but does not remove the uncertainty.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Because the package is only 121 days old, this is concerning but not conclusive evidence of abandonment.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning reduces repository assurance, though it is not by itself evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package intended to be integrated into applications.