onetoweb/mendrix-egcs

Risky to depend on: this package has had only one release, published over four years ago, with no recent repository activity. It is small and clearly backed by a matching organization repository, but there is little evidence of ongoing maintenance or security oversight.

Latest v1.0.0

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, v1.0.0, first published over four years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance, although a small stable client can sometimes remain unchanged.

Repo commit activity

The repository recorded no commits and no active maintainers during the last three months, consistent with the package having been effectively inactive since its initial release. No provided signal shows recent maintenance to offset this.

Repo popularity

The repository has zero stars and forks and only two watchers, providing little community visibility or supporting evidence. Low popularity alone is not decisive for a small API client.

Repo tooling

Composer is used as the build tool, which is appropriate for the package, but no security scanning tools are reported. The repository's minimal tooling provides limited additional assurance.

Repository archived

The repository is not archived, which leaves the project technically maintainable, but its last push was over four years ago and does not offset the lack of current activity.