mrferrys/command_pattern

Its MIT license, readable README, and tiny runtime dependency make the package straightforward to inspect and integrate. The lack of security tooling leaves less evidence for safe changes.

Latest 1.1.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had six releases, but the latest was in November 2021 and there have been no releases in nearly five years. This is strong evidence of abandonment for a dependency that may need maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly five-year release gap. No newer activity compensates for this maintenance concern.

Maintainers

One registry maintainer is consistent with a small personal project, but it provides little apparent redundancy when repository activity has stopped. The single-person publishing base increases abandonment risk.

Repo tooling

Composer is used as the build tool, which fits the package, but no security scanning tools are present. The missing scanning provides less assurance for future changes.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling security issues. This is a transparency gap, though it is less severe than the stalled maintenance.