naffiq/php-randomorg-draws
Risky to adopt for a new project: this package has had no release or repository activity since July 2017. It is not deprecated or archived and includes tests, documentation, and a stable MIT declaration, but its long-term abandonment risk is substantial.
45%
Total Score
50
100
75
75
Health Score Breakdown
The package has only one release, published about 9 years ago, with no releases in the last 12 months. This is strong evidence of stagnation, although the single stable release may be sufficient for a narrowly scoped library.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the absence of releases since 2017. No provided signal shows current maintenance capacity.
The repository has 1 star, 0 forks, and 1 watcher, providing little community evidence to compensate for the inactive maintainer base. Low popularity alone is not disqualifying for a small library.
Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a transparency gap, though it is secondary to the much stronger evidence of inactivity.
The repository has no security policy. This weakens vulnerability-reporting transparency, but it is a smaller concern than the package's long period without maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 naffiq |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-curl-class/php-curl-class Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.