nepenteh/docma

The small dependency set and clear README make the project straightforward to adopt. Limited security tooling and community activity mean you should be prepared to maintain it yourself.

Latest v1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

A single registry maintainer is consistent with the linked repository being user-owned rather than organization-backed, but it leaves little visible publishing redundancy.

Release history

The package has had no release in about three years, with all three releases clustered on 17 April 2023. This is a meaningful maintenance concern, although the stable 1.0.2 release and available release notes provide some transparency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being in April 2023. This is strong evidence that maintenance has stopped or is dormant.

Repo popularity

The repository has zero stars and forks and only one watcher, so there is little visible community support to compensate for the inactive maintainer activity. Popularity is supporting evidence rather than a verdict by itself.

Repo tooling

Composer is used for the build, but no security-scanning tooling is present. That is a hygiene and transparency gap for a package intended to be deployed as a documentation application.