morton/youshu

The small project has limited transparency beyond its basic README and license, with no security policy or testing evidence. Its focused dependency set and package-to-repository match are useful positives, but maintenance capacity remains uncertain.

Latest 1.0.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, all within a few days in October 2021, followed by nearly five years without a release. This is strong evidence of abandonment risk despite the stable 1.0.2 version.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository having stopped changing since October 2021.

Project backing

The source repository is owned by an individual rather than an organization, offering no visible organizational backing to compensate for the narrow maintenance base.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide little supporting evidence of review or community maintenance.

Repo tooling

Composer is used for the build, but no security scanning tool is configured, leaving a modest repository hygiene gap.