netgloo/benjamin_core

Its MIT license, small dependency set, and matching repository make the package straightforward to inspect. The absent tests and security scanning reduce confidence in ongoing maintenance.

Latest 1.0.7

Packagist

38%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 10 years ago, with no releases in the last 12 months. That prolonged inactivity is a substantial abandonment concern despite eight historical releases.

Repo popularity

The repository has one star and no forks, offering little supporting evidence of a maintained user or contributor community. Popularity is only corroborating evidence, so this does not drive the verdict alone.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. This is a modest transparency and maintenance gap, especially alongside the long period without updates.

Security policy

The repository has no security policy, leaving no documented reporting process for vulnerabilities. This is a secondary concern rather than evidence that the release is unsafe.